Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls aligned with NIST SP 800-171 and DFARS 252.204-7012 to safeguard Controlled Unclassified Information and defense-related data processed or stored on covered systems. The scope involves ensuring full compliance with the specified regulatory frameworks through technical configuration, policy development, employee training, and continuous monitoring, with a focus on protecting information systems that handle sensitive defense information. Compliance must be rigorously documented and validated to meet Department of Defense standards. This subcontract under the Defense Logistics Agency is classified under NAICS code 541512, indicating it pertains to computer systems design services. The work is intended to support the broader DoD mandate for secure handling of CUI across the defense industrial base. Performance of the contract is expected to occur across locations managed by the prime contractor or subcontractor, without a fixed physical site specified. The effort is critical to maintaining the integrity and security of defense supply chain information and must be executed in accordance with all applicable federal cybersecurity directives.