NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of cybersecurity compliance assessments in accordance with NIST Special Publication 800-171 for systems that process, store, or transmit Controlled Unclassified Information. The assessments must evaluate the implementation of security controls outlined in the publication and determine the system’s compliance posture. All findings must be accurately documented and formally reported to the Department of Defense Supplier Performance Risk System, ensuring transparency and accountability in the defense supply chain. The work is structured as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541611 indicating it falls under administrative management and other administrative support services. The performance location and specific point of contact are not detailed, but the contractual obligations are tied to meeting federal cybersecurity standards and delivering verifiable results to the DoD’s centralized compliance tracking system.