Cybersecurity Compliance & NIST SP 800-171 Assessment Services

The contract requires comprehensive cybersecurity compliance services aligned with NIST SP 800-171 standards, focusing on assessing, documenting, and reporting the security posture of subcontractors and prime contractors within the Department of Defense supply chain. Services include conducting formal NIST SP 800-171 assessments to evaluate compliance with required security controls, developing and maintaining detailed System Security Plans that outline how protections are implemented and managed, and submitting accurate scores and documentation through the Supplier Performance Risk System for federal reporting and visibility. All deliverables must ensure that subcontractors meet federal cybersecurity requirements necessary for handling controlled unclassified information. The work is performed under a subcontract arrangement tied to a Defense Logistics Agency procurement, with the NAICS code 541611 indicating management, scientific, and technical consulting services. While the exact location of performance is unspecified, the services are intended to support DOD-wide compliance obligations and are expected to be delivered in alignment with federal cybersecurity frameworks. The contract emphasizes continuous monitoring and reporting to maintain an up-to-date and verifiable security posture across the contractor ecosystem, ensuring readiness for audits and contractual obligations under federal acquisition regulations.