Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard covered defense information. The contractor is responsible for developing a System Security Plan that documents the safeguards in place and conducting an annual self-assessment to ensure continued compliance with federal cybersecurity standards. The work supports the Department of Defense’s broader objective of securing sensitive information across its supply chain and is executed under a subcontract agreement managed by the Defense Logistics Agency. Compliance is mandatory and must be demonstrated through rigorous documentation and regular evaluations to maintain authorization to handle protected data. The contract is categorized under NAICS code 541512, indicating it involves computer systems design and related services, and is positioned for performance under the broader defense infrastructure without geographic restrictions specified.