Cybersecurity Compliance and SPRS Reporting

The contract requires implementation of all NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information in accordance with DFARS clauses 252.204-7012 and 252.204-7020. This includes establishing and maintaining a compliant cybersecurity posture across all systems handling CUI, ensuring technical and administrative safeguards are fully operational and documented. The contractor must perform a self-assessment of their cybersecurity controls using the NIST 800-171 Assessment Methodology and submit the resulting score to the Supplier Performance Risk System, ensuring timely and accurate reporting as mandated by federal defense regulations. This subcontract falls under the NAICS code 541611 and is issued by the Defense Logistics Agency under the Department of Defense. The obligation to comply with NIST 800-171 and report through SPRS is mandatory and applies to all project phases, with no exceptions or delays permitted. Failure to meet these requirements may result in non-compliance penalties, loss of contract eligibility, or financial repercussions. The performance location and point of contact details are unspecified, but all cybersecurity measures must be fully traceable and auditable to support government verification efforts.