Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information, ensuring full compliance with DFARS 252.204-7012. This includes the development of a System Security Plan that documents how the required controls are applied, monitored, and enforced across all systems handling CDI. Annual assessments must be conducted to validate the effectiveness of these controls, with findings documented and submitted as required. Any cybersecurity incidents involving CDI must be reported promptly in accordance with federal guidelines, and appropriate remediation actions must be taken without delay. The scope encompasses both initial setup and continuous operational support to maintain compliance throughout the contract period. This subcontract falls under the North American Industry Classification System code 541511 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The contract is tied to the award SPE60524D4512 with delivery order SPE60526FHST8 and is active as of July 21, 2026. Performance is expected to meet all federal cybersecurity standards without geographic restrictions, though the specific location of performance is not defined. The work requires certified expertise in NIST frameworks and DFARS compliance, with accountability for accurate documentation, timely reporting, and sustained adherence to all security requirements.