NIST SP 800-171 Cybersecurity Compliance for Subcontractors

The Defense Logistics Agency, under the Department of Defense, has established a subcontract for cybersecurity services focused on ensuring that subcontractor systems handling Controlled Unclassified Information comply with NIST SP 800-171 standards. The scope of work includes the development of System Security Plans and Plans of Action and Milestones, the implementation of access controls, and the management of incident reporting. To maintain ongoing compliance, the contract requires the performance of annual assessments. This effort falls under NAICS code 541512 and is designed to secure sensitive government data across the subcontractor supply chain.