Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 Rev 2 cybersecurity controls to safeguard Controlled Unclassified Information across all applicable systems. This includes conducting regular system assessments to verify compliance, establishing robust incident reporting protocols for timely identification and notification of security breaches, and maintaining comprehensive documentation to demonstrate continuous adherence to the standard. All activities must align with the defense sector’s rigorous requirements for protecting sensitive but unclassified data. The work is performed under a subcontract awarded by the Defense Logistics Agency, a component of the Department of Defense, with the North American Industry Classification System code 541512 indicating information technology services. The contract is publicly accessible through the DIBBS portal and remains active with a posted date of July 17, 2026. While specific performance location details are not provided, the obligations encompass all systems handling CUI under the subcontractor’s purview, with full accountability for compliance through audit-ready records and responsive security management practices.