Cybersecurity Compliance & NIST SP 800-171 Support

The contract requires the performance of a cybersecurity assessment aligned with NIST Special Publication 800-171 to ensure compliance with Defense Federal Acquisition Regulation Supplement clauses 252.204-7012 and 252.240-7997. The work involves evaluating the contractor’s information systems handling controlled unclassified information to verify adherence to the required security controls and documenting the findings for official submission to the Supplier Performance Risk System. This effort is critical for maintaining eligibility to support Department of Defense activities and fulfilling mandatory cybersecurity obligations for contractors handling sensitive government data. The effort is classified as a subcontract under the Defense Logistics Agency, falling within NAICS code 541611 for management consulting services. Although no specific location is provided for performance, the obligation applies to any system processing controlled unclassified information under the scope of the contract. Compliance must be formally reported through the SPRS platform, and failure to meet requirements could impact the contractor’s standing with the Department of Defense. The solicitation was posted in July 2026, indicating this is a forward-looking procurement anticipated for future award and execution.