Cybersecurity Compliance (NIST SP 800-171)

The contract requires full compliance with NIST Special Publication 800-171 for all systems that process, store, or transmit Controlled Unclassified Information related to the contract. This includes implementing and maintaining all required security controls to protect CUI from unauthorized access, disclosure, or modification. The contractor must ensure their cybersecurity posture meets the Defense Department’s assessment standards and be prepared to demonstrate compliance through required evaluations, audits, or documentation submissions. The work falls under the NAICS code 541512 for computer systems design services and is structured as a subcontract under the Defense Logistics Agency, a component of the Department of Defense. Systems must be configured and operated in alignment with federal cybersecurity standards to support DoD assessment readiness, with performance expected across all locations where contract-related CUI is handled. While specific geographic details are not provided, compliance obligations apply universally wherever the subcontracted work occurs, and no set-aside provisions are designated for small or special categories of businesses.