Cybersecurity Compliance Reporting (NIST SP 800-171)

The contractor is required to document and assess its information system security posture in strict alignment with NIST Special Publication 800-171, ensuring all required controls are evaluated, implemented, and validated. This includes conducting a comprehensive self-assessment of cybersecurity practices relevant to safeguarding controlled unclassified information within nonfederal systems. The assessment must result in a formal reporting submission to the Department of Defense Supplier Performance Risk System, demonstrating compliance with federal cybersecurity standards for defense contractors. The work must be completed and submitted by April 30, 2026, with the performance location identified as New Cumberland, Pennsylvania, under the NAICS code 541611 for management, scientific, and technical consulting services. This subcontract is issued by the ASC Supplier Operations OEM Division under the Department of Defense, and the contractor is expected to maintain ongoing adherence to the NIST framework throughout the contractual obligation.