Cybersecurity Compliance (NIST SP 800-171) Assessment & Reporting

The contract requires the implementation, documentation, and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information within systems handling sensitive DoD data. Compliance with these controls is mandatory to meet the requirements of DFARS 252.204-7012, which mandates robust cybersecurity practices for contractors supporting defense projects. The work includes not only establishing the necessary technical and administrative safeguards but also ensuring continuous monitoring and reporting to sustain compliance over time. In addition to maintaining security controls, the contractor must support cyber incident reporting obligations as defined under the same DFARS clause, ensuring timely and accurate notification of any security breaches or suspicious activities affecting covered information. This subcontract is issued by the Defense Logistics Agency under the Department of Defense, classified under NAICS code 541512 for computer systems design services, with a response deadline of July 23, 2026. The performance location and point of contact details are unspecified, but the work is expected to align with federal cybersecurity standards and be conducted in support of DLA's operational and information protection requirements.