Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST Special Publication 800-171 to safeguard Controlled Unclassified Information within contractor systems. This includes establishing, monitoring, and updating technical and administrative safeguards to ensure compliance with federal standards for protecting sensitive data. The contractor must perform regular self-assessments to evaluate the effectiveness of these controls and submit accurate, timely reports documenting their compliance status to the federal government. This subcontract is under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services. The work is tied to a specific procurement identified by contract numbers SPE7L426D5006 and SPE7L326F1713, and performance is expected to support secure handling of information across defense-related operations. While the physical location of performance is not specified, full compliance with the NIST framework and consistent reporting remain mandatory obligations throughout the contract term.