Cybersecurity Compliance & Reporting Support

This contract provides cybersecurity compliance and reporting support to ensure adherence to NIST SP 800-171 standards for protecting Controlled Unclassified Information, including full implementation of the associated security controls across systems handling CUI. It requires ongoing support for DFARS 252.204-7012 compliance, covering timely cyber incident reporting, accurate System Security Plan updates, and regular submission of Security Assessment Reports to the Supplier Performance Risk System. The work involves conducting internal and external audits to validate control effectiveness, documenting remediation activities, and maintaining continuous compliance posture through proactive monitoring and reporting. The subcontract is issued under the Defense Logistics Agency as part of the Department of Defense’s broader cybersecurity initiatives, with performance obligations centered on sustaining CUI safeguards throughout the contract lifecycle.