NIST SP 800-171 Compliance Assessment and SPRS Submission

The contract requires the execution of a NIST SP 800-171 compliance assessment for information systems that process, store, or transmit Controlled Unclassified Information, ensuring alignment with federal cybersecurity standards for safeguarding sensitive data. The work includes identifying gaps in current security controls, documenting deficiencies, and developing a detailed Plan of Action and Milestones to address each finding with realistic timelines and responsible parties. Successful completion necessitates the submission of the assessment results and the finalized POA&M to the Department of Defense’s Supplier Performance Risk System to update the contractor’s security posture in the government’s risk evaluation framework. The activity is conducted as a subcontract under the Defense Logistics Agency, governed by NAICS code 541611, and is tied to the broader DoD objective of maintaining supply chain cyber resilience through standardized compliance verification.