Cybersecurity Compliance (NIST SP 800-171) Assessment & Reporting

The contract requires performance of a comprehensive self-assessment of NIST SP 800-171 security controls to ensure alignment with Department of Defense cybersecurity requirements. This includes identifying, documenting, and validating the implementation of all applicable safeguards within the contractor’s systems, followed by formal submission of assessment results through the Supplier Performance Risk System. The scope encompasses full lifecycle compliance activities, from initial evaluation to ongoing monitoring, ensuring continuous adherence to the standard. The contractor must maintain accurate records and demonstrate sustained compliance throughout the contract period, with periodic reviews to confirm controls remain effective and up to date. This subcontract under the Defense Logistics Agency falls under NAICS code 541512 for computer systems design services and is tied to a DoD procurement. While the specific location of performance is not detailed, the deliverables are centralized through the SPRS portal, requiring digital reporting and data integrity. The contractor is expected to operate with high transparency and accountability, as noncompliance may impact eligibility for future DoD contracts. There is no set-aside designation, meaning the award is open to all qualified entities without preference based on business size or ownership. The contract is active as of June 2026 and is linked to a specific DLA contract vehicle.