Cybersecurity Compliance & SPRS Reporting

The contract requires the performance of NIST SP 800-171 cybersecurity assessments for subcontractors who handle Controlled Unclassified Information, ensuring adherence to federal security standards. The scope includes ongoing monitoring and validation of compliance measures to safeguard CUI throughout the subcontractor supply chain, with a primary focus on maintaining up-to-date records in the Supplier Performance Risk System. All activities must align with Department of Defense requirements under the Defense Logistics Agency’s oversight, and failure to meet these standards could impact contractual obligations and future performance ratings. The work is classified as a subcontract under NAICS code 541512 and is tied to the broader DOD cybersecurity framework, emphasizing continuous compliance rather than one-time evaluations.