Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of security controls outlined in NIST Special Publication 800-171 to safeguard covered defense information, ensuring alignment with federal cybersecurity standards for contractors handling sensitive DOD data. This includes establishing technical, administrative, and physical safeguards across systems and processes, as well as maintaining detailed records to demonstrate compliance at every level of the control framework. The scope encompasses not only the deployment of controls but also the preparation and submission of a formal compliance assessment, which must be verified and reported in accordance with mandatory DOD requirements. This subcontract, issued under the Defense Logistics Agency within the Department of Defense, is classified under NAICS code 541512 for computer systems design services and is tied to contract SPE7M126V9023. While specific performance locations and point of contact details are not provided, the work is expected to support the protection of critical defense information across all applicable environments. Compliance is non-negotiable and must be achieved within the contractual timeframe, with failure to meet requirements potentially impacting eligibility for future DOD work or triggering contractual remedies. The emphasis is on sustained adherence to NIST 800-171 controls and documented proof of implementation, not just initial setup.