NIST SP 800-171 Cybersecurity Compliance Assessments

The contract requires the execution of NIST SP 800-171 cybersecurity assessments to evaluate the protection of Controlled Unclassified Information within information systems, ensuring alignment with federal security standards. This includes the development and maintenance of comprehensive System Security Plans that document security controls, risk management strategies, and implementation procedures to safeguard CUI. All assessment results and compliance status must be formally documented and submitted to the Department of Defense’s Supplier Performance Risk System to maintain visibility and accountability across the defense supply chain. The work is executed under a subcontract agreement tied to the Defense Logistics Agency and falls under the NAICS code 541611 for management, scientific, and technical consulting services, with performance obligations extending across the Department of Defense’s operational environment without geographic restriction.