Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract requires ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information on systems managed under the agreement. This includes conducting regular self-assessments to evaluate adherence to the framework and submitting resulting scores to the Supplier Performance Risk System to demonstrate compliance status. All activities must align with DFARS cybersecurity requirements, ensuring that any system handling sensitive defense data meets federal standards for information protection. The work supports the Defense Logistics Agency under the Department of Defense and is classified as a subcontract with a NAICS code of 541512, indicating it involves computer systems design and related services. Compliance is not a one-time effort but an enduring obligation tied to the continued handling of covered information, with results tracked and reported through official government systems to maintain contract standing and operational eligibility.