Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract provides third-party support to ensure compliance with NIST SP 800-171 requirements, facilitate SPRS submissions, and prepare subcontractors for CMMC Level 2 audits. The work is scoped to assist organizations in meeting federal cybersecurity standards by evaluating current controls, identifying gaps, implementing necessary safeguards, and documenting compliance practices aligned with NIST guidance. The provider will guide clients through the System for Award Management’s Supplier Performance Risk System submissions, ensuring accurate and timely reporting to demonstrate adherence to cybersecurity baselines. Additionally, the support includes readiness activities for CMMC Level 2 assessments, such as policy development, staff training, audit trail preparation, and simulated audits to validate robustness of cybersecurity posture. The effort is structured as a subcontract under the Department of Defense’s Defense Logistics Agency, classified under NAICS code 541512 for computer systems design services. Performance will occur without geographic restriction, and the work is intended for contractors handling Controlled Unclassified Information who must meet DoD cybersecurity mandates. The contract aims to bridge capability gaps in organizations transitioning to or maintaining CMMC Level 2 compliance, with a focus on end-to-end support from assessment through submission and audit preparation. The subcontractor is expected to deliver actionable, compliant outcomes that withstand DOD scrutiny and uphold the integrity of the defense industrial base.