Cybersecurity Compliance (NIST SP 800-171 Assessment & SPRS Reporting)

The contract requires the performance of Cybersecurity Compliance assessments in accordance with NIST Special Publication 800-171 for systems that handle Controlled Unclassified Information. The primary objective is to evaluate the implementation of security controls and achieve a minimum assessment score of 110, ensuring compliance with federal cybersecurity standards. All assessment results must be formally submitted to the Supplier Performance Risk System, where they will be recorded and used to evaluate contractor security posture. The work is governed under a subcontract structure in support of the Defense Logistics Agency, operating within the broader Department of Defense framework, and is classified under NAICS code 541612, indicating specialized IT and cybersecurity services. The contract was posted on August 1, 2026, and the place of performance remains unspecified, suggesting flexibility but requiring the contractor to ensure assessments are conducted on all applicable systems regardless of physical location.