Cybersecurity Compliance (NIST SP 800-171)

The contract mandates strict adherence to cybersecurity standards for handling Controlled Unclassified Information in alignment with NIST SP 800-171 and DFARS 252.240-7997, requiring the implementation of comprehensive security controls across all relevant systems. This includes conducting detailed system assessments, developing and maintaining complete documentation, and preparing a formal System Security Plan that outlines how security requirements are met and sustained. The effort is focused on ensuring the confidentiality, integrity, and availability of CUI throughout its lifecycle, with an emphasis on continuous compliance and audit readiness. The work is being performed under a subcontract awarded by the Defense Logistics Agency, part of the Department of Defense, and is governed under NAICS code 541512, which pertains to computer systems design services. The contract was posted on July 15, 2026, and performance location details are not specified, but the obligation to meet federal cybersecurity standards applies regardless of physical or digital work location.