Cybersecurity Compliance – NIST SP 800-171 Implementation and Reporting

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information, ensuring compliance with federal cybersecurity standards for handling sensitive unclassified information. This includes conducting a System Security Plan, performing a SPRS self-assessment to document compliance posture, and establishing processes for timely cyber incident reporting in accordance with DFARS requirements. The work is specifically scoped to support the defense supply chain and must be performed by a small business under a Total Small Business Set-Aside, with the North American Industry Classification System code 541512 indicating information technology services. All activities are tied to the Department of Defense’s mission to protect critical data and must be executed in alignment with DLA Troop Support’s expectations for cybersecurity readiness and accountability.