Cybersecurity Compliance Assessments & Reporting

The contract requires the performance of comprehensive cybersecurity assessments for contractors handling Controlled Unclassified Information under Department of Defense mandates, specifically aligned with NIST SP 800-171 standards. This includes evaluating compliance levels, developing detailed System Security Plans, and submitting accurate reporting through the Supplier Performance Risk System. The work demands a thorough understanding of federal cybersecurity frameworks and the ability to accurately score and document adherence to required controls. Ongoing monitoring is essential to maintain continuous compliance, and any cybersecurity incident must be reported within a strict 72-hour window to ensure timely response and adherence to federal reporting obligations. The subcontract is managed under the Defense Logistics Agency and falls under the NAICS code 541611, indicating its focus on administrative management and general management services supporting federal cybersecurity compliance efforts.