NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of NIST SP 800-171 cybersecurity self-assessments or formal evaluations for Department of Defense contractors to ensure compliance with federal information security standards. This includes documenting system architectures, mapping implemented security controls to the NIST framework, and submitting summary assessment scores to the Supplier Performance Risk System. The work demands a thorough understanding of cybersecurity requirements and the ability to accurately evaluate and report on an organization’s adherence to the specified controls. Ongoing support is needed to maintain compliance status, track remediation efforts, and provide updated reporting as systems evolve or new requirements emerge. This subcontract falls under the NAICS code 541611 for management consulting services and is associated with the Defense Logistics Agency under the Department of Defense. The work must be performed to meet defense contractor obligations and is tied to a specific contract vehicle with a publicly accessible record. Completion of the assessments and accurate submission to SPRS are critical for contractors to remain eligible for DoD work, making the role essential to the secure handling of controlled unclassified information. The contract will demand continuous engagement to ensure systems remain aligned with evolving compliance standards and audit readiness.