Cybersecurity Compliance and SPRS Management

This contract requires full compliance with DFARS 252.204-7012 and NIST SP 800-171 standards for the protection of controlled unclassified information, involving the implementation, documentation, and ongoing management of cybersecurity controls across all relevant systems. The work includes conducting system assessments to validate adherence to required safeguards, preparing comprehensive control documentation to demonstrate compliance, and submitting accurate and timely updates to the Supplier Performance Risk System to maintain proper visibility and accountability within the Department of Defense supply chain. The subcontractor must ensure all CUI handling processes align with federal cybersecurity mandates and are consistently monitored for adherence and improvement. The contract is issued under the Defense Logistics Agency as part of the Department of Defense procurement structure, classified under NAICS code 541611 for computer systems design services. It is structured as a subcontract with performance obligations tied to federal cybersecurity compliance obligations rather than geographic location. The work must be executed in alignment with the terms of the primary contract SPE7M125D5000 and its associated delivery order SPE7M126F4775. While specific points of contact or physical locations are not provided, the obligations are centralized around maintaining a verifiable and audit-ready cybersecurity posture for the protection and handling of controlled unclassified information within defense-related systems.