Cybersecurity Compliance and Reporting Services

The contract requires ongoing cybersecurity compliance services focused on implementing and maintaining NIST SP 800-171 standards to protect controlled unclassified information within Department of Defense systems. This includes developing and sustaining an incident response plan to ensure timely detection, containment, and recovery from cybersecurity events, as well as continuous monitoring and reporting through the Supplier Performance Risk System to demonstrate compliance status and risk mitigation efforts. The work is performed under a subcontract for the Defense Logistics Agency, with the NAICS code 541612 reflecting management consulting services related to administrative and general management consulting. All activities must be conducted to meet federal cybersecurity requirements and align with DOD expectations for supply chain security. The contractor is responsible for maintaining up-to-date documentation, conducting regular assessments, and providing accurate SPRS scores to support the agency’s risk posture. The project is positioned under a subcontract awarded in June 2026, with performance likely occurring at various locations determined by the prime contractor or end-user requirements, and no specific place of performance has been designated beyond the overarching DOD scope.