Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 controls to safeguard Controlled Unclassified Information within the contractor’s systems, ensuring full compliance with federal cybersecurity standards. This includes developing a System Security Plan that documents all security controls, their implementation status, and residual risk, as well as preparing and submitting a Security Assessment Report through the Supplier Performance Risk System to validate compliance. The work is focused on meeting the Department of Defense’s requirements for handling CUI and supporting the Defense Logistics Agency’s cybersecurity posture. The subcontract is classified under NAICS code 541512 and is tied to a specific DLA contract with performance obligations extending through the life of the awarded agreement, with no specific geographic restriction indicated for place of performance.