NIST SP 800-171 Cybersecurity Assessment & Compliance

The contract requires the performance of comprehensive cybersecurity assessments aligned with NIST Special Publication 800-171 to ensure the proper safeguarding of Controlled Unclassified Information. This includes conducting detailed self-assessments of existing security controls, identifying gaps in compliance, and implementing necessary remediation measures to meet federal requirements. The contractor is responsible for preparing and submitting System Security Plan Reports through the Supplier Performance Risk System to document and validate compliance status. All activities must be executed with strict adherence to CUI protection standards, ensuring that information handling practices, access controls, and system configurations fully satisfy the specifications outlined in NIST SP 800-171. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541611 for management consulting services. The contract is tied to the DLA award SPE8E621D0029 with delivery order SPE8E626F1254 and is expected to be carried out in support of defense-related operations. While specific performance locations are not defined, the contractor must be prepared to operate across any DLA-contracted environments where CUI is handled. The requirement demands ongoing vigilance, accurate documentation, and timely reporting to maintain continuous compliance and avoid potential contractual or security violations.