Cybersecurity Compliance and Reporting Support

The contract supports ongoing cybersecurity compliance activities for systems handling Controlled Unclassified Information related to contract performance, with a focus on aligning with NIST SP 800-171 requirements. This includes the continuous assessment of security controls, development and maintenance of system security plans, and regular reporting through the Supplier Performance Risk System to ensure adherence to federal cybersecurity standards. The provider is responsible for implementing, monitoring, and updating necessary safeguards to protect CUI throughout the lifecycle of contract performance, ensuring that all technical and procedural requirements remain current and effective. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services. The work is performance-based and ongoing, requiring sustained engagement to maintain compliance as threats and regulatory expectations evolve. There is no specified set-aside designation or geographic limitation for performance, and the contract is tied to the broader defense supply chain’s need for standardized, traceable cybersecurity posture across contractors supporting critical DoD missions.