Cybersecurity Compliance & Reporting (NIST SP 800-171)

This contract mandates the implementation and ongoing maintenance of cybersecurity controls to protect covered defense information in alignment with DFARS 252.204-7012 and NIST SP 800-171 requirements. The work involves establishing, validating, and sustaining a robust security posture that meets federal standards for safeguarding sensitive data within the defense supply chain, with a focus on continuous compliance and incident reporting. All activities must ensure adherence to the 110 family of security requirements outlined in NIST SP 800-171, including access control, audit and accountability, configuration management, and incident response. The subcontract falls under NAICS code 541512, indicating it is related to computer systems design services, and is managed by the Defense Logistics Agency under the Department of Defense. Performance is expected to be conducted in support of broader DoD operational and information security objectives, with the contractor responsible for documenting compliance, responding to audit requests, and maintaining a current system security plan. The contract’s effective date is set for July 17, 2026, and while the place of performance is not specified, the nature of the work dictates that it must be carried out in a secure environment compliant with federal cybersecurity protocols.