Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract provides comprehensive cybersecurity compliance support focused on meeting NIST SP 800-171 requirements for organizations handling controlled unclassified information within the Department of Defense supply chain. It includes the development and maintenance of a System Security Plan tailored to the organization’s environment, conducting assessments to determine compliance posture, and ensuring accurate submission of SPRS scores to reflect current security controls. The scope further requires adherence to DFARS 252.204-7019 reporting obligations, ensuring timely and complete disclosure of assessment results to meet federal contractor obligations. The work is being delivered under a subcontract tied to the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under the category of computer systems design services. The contract is part of broader efforts to enforce cybersecurity standards across the defense industrial base, requiring the contractor to implement and document security controls aligned with NIST guidelines and to maintain an ongoing compliance posture. Although specific performance locations and points of contact are not provided, the contractual obligations center on delivering documented proof of compliance through formal plans, assessments, and regulatory reporting to satisfy DoD requirements.