Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires performing a comprehensive cybersecurity assessment in accordance with NIST SP 800-171 to ensure compliance with DFARS clauses 252.204-7012 and 252.204-7020, which mandate the protection of controlled unclassified information within contractor systems. The assessment must evaluate the implementation of security controls across all applicable areas and document any gaps or deficiencies, with the ultimate goal of preparing a formal submission to the Supplier Performance Risk System to demonstrate compliance. This work is critical for maintaining eligibility to handle CUI on behalf of the Department of Defense and supports the Defense Logistics Agency’s obligation to safeguard sensitive information across its supply chain. The engagement is structured as a subcontract under the NAICS code 541611 for management consulting services and is tied to a specific award through the DIBBS platform. Performance is expected to meet federal cybersecurity standards without geographic limitations specified, though the work supports a Department of Defense mission. The subcontractor must possess the technical expertise to interpret NIST controls accurately, conduct thorough audits, and generate actionable remediation plans to achieve full compliance. Timely and accurate submission to SPRS is mandatory to avoid contractual penalties and ensure continued access to sensitive DoD information.