NIST SP 800-171 Cybersecurity Assessment & Compliance Remediation

The contract requires comprehensive cybersecurity assessments of contractor systems that handle Controlled Unclassified Information to evaluate compliance with NIST Special Publication 800-171 standards. The assessment process involves identifying gaps and deficiencies in current security controls, documenting these findings precisely, and developing a detailed Plan of Action and Milestones to address each weakness. The ultimate goal is to achieve full compliance with the NIST SP 800-171 framework, with a specific target score of 110, reflecting a high level of implementation rigor and control effectiveness across all required security requirements. The work is performed under a subcontract for the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541512 for Computer Systems Design Services. Performance is expected to be aligned with federal cybersecurity mandates for protecting CUI, and the contractor must ensure remediation efforts are systematic, measurable, and trackable through the POA&M. Although the specific location of performance is not defined, all work must be executed to meet federal standards for cybersecurity posture enhancement, and timelines and deliverables are tied directly to achieving the targeted compliance score.