Cybersecurity Subcontractor Compliance Management

The contract requires comprehensive management and verification of subcontractor compliance with NIST SP 800-171 cybersecurity requirements, ensuring all subcontractors implement the necessary safeguards to protect controlled unclassified information. This includes validating subcontractor compliance through the Supplier Performance Risk System (SPRS) and ensuring the proper flow-down of the DFARS clause 252.204-7012 to all applicable tiers of the supply chain. The contractor is responsible for monitoring, documenting, and reporting subcontractor adherence to these cybersecurity standards throughout the performance period. This subcontract, issued under the Defense Logistics Agency within the Department of Defense, is classified under NAICS code 541611 and applies across all locations where subcontracted work is performed. The contractor must maintain ongoing oversight to confirm continuous compliance, address any deficiencies promptly, and ensure audit readiness at all levels. Failure to meet these requirements could result in contract non-compliance, financial penalties, or termination.