Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract supports compliance with NIST SP 800-171 requirements to fulfill the cybersecurity obligations outlined in DFARS 252.204-7012, focusing on the development, assessment, and reporting of a System Security Plan to ensure proper protection of controlled unclassified information. The work encompasses the full lifecycle of compliance, including documenting security controls, conducting internal assessments, and submitting accurate scores to the Supplier Performance Risk System to validate adherence to federal cybersecurity standards. The effort is performed under a subcontract awarded by the Defense Logistics Agency, a component of the Department of Defense, and is tied to the NAICS code 541512 for computer systems design services, indicating the technical nature of the compliance work. The contract is not subject to a specific set-aside and is available for performance without geographic restrictions, with all activities centered on meeting Department of Defense cybersecurity mandates through structured, documented, and verifiable practices.