Cybersecurity Compliance (NIST SP 800-171 & DFARS 252.204-7012)

The contract requires the implementation and documentation of NIST SP 800-171 security controls for systems that handle Controlled Unclassified Information, ensuring full compliance with federal cybersecurity requirements. This includes configuring, testing, and formally documenting all 110 security controls outlined in the standard to protect CUI across the contractor’s information systems. The effort also necessitates the preparation and submission of a System Security Plan and the successful completion of a SPRS assessment, which must be accurately recorded and submitted to the Department of Defense’s Supplier Performance Risk System to demonstrate compliance readiness. The work must be completed under the constraints of a subcontract arrangement with a strict deadline for response set for May 8, 2026, with all performance activities aligned to meet the stringent standards of DFARS 252.204-7012. The contract falls under NAICS code 541512 for computer systems design services and is sponsored by the Department of Defense through the Maritime Supply Chain ESOC Buys office, requiring meticulous adherence to federal cybersecurity protocols without exception.