Cybersecurity Compliance (NIST SP 800-171 Assessment)

This contract requires the execution of a NIST SP 800-171 assessment to validate compliance with DFARS 252.204-7012 for the proper handling of Controlled Unclassified Information. The assessment must thoroughly evaluate the contractor’s information systems and security controls to ensure they meet the cybersecurity requirements mandated for safeguarding CUI. As a subcontract under the Defense Logistics Agency, the work is tied to Department of Defense operations and demands strict adherence to federal cybersecurity standards without reliance on third-party certifications or external audit reports beyond the scope of the assessment. The contract falls under NAICS code 541618 for other scientific and technical consulting services and is structured to support the broader cybersecurity compliance objectives of the DoD. Performance is expected to align with federal guidelines and will be conducted in support of defense-related activities, though no specific location is identified for performance. The subcontract is part of a larger procurement chain initiated under contract SPE7M125D60BH with delivery order SPE7M126F0929, indicating it is embedded within an existing defense supply and services framework. Timeliness and accuracy of the assessment report are critical to maintaining contract validity and ensuring continued eligibility for handling CUI across the defense industrial base.