Cybersecurity Compliance (NIST SP 800-171) Support

The contract requires support for achieving and maintaining NIST SP 800-171 compliance to properly handle Controlled Unclassified Information under DFARS requirements, ensuring that all cybersecurity controls are implemented and documented in alignment with federal standards. The work involves conducting System Security Plan assessments, performing SPRS score evaluations, and supporting remediation efforts to meet the Department of Defense's stringent information security obligations for subcontractors handling sensitive unclassified data. This is a subcontract under the Defense Logistics Agency, classified under NAICS code 541512 for Custom Computer Programming Services, and is expected to ensure compliance through continuous monitoring, documentation, and reporting to validate adherence to CUI protections. The effort is critical for sustaining eligibility to work on defense-related projects and must align with all applicable DoD cyber hygiene mandates, with performance tied to maintaining a verifiable and defensible security posture throughout the contract lifecycle.