SPRS Compliance Support for NIST 800-171

This contract provides support for achieving and documenting compliance with NIST Special Publication 800-171 requirements as mandated by DFARS 252.204-7012, ensuring that security controls are properly implemented and maintained across covered contractor information systems. The scope includes assessing current cybersecurity posture, identifying gaps in controls, implementing necessary corrective actions, and preparing comprehensive documentation to demonstrate full compliance. A critical component of the effort involves generating accurate assessment scores and submitting them to the Supplier Performance Risk System, which is required for maintaining eligibility to work on Department of Defense contracts. The work is being performed under a subcontract tied to a Defense Logistics Agency procurement, specifically linked to contract SPE60522D1000 and delivery order SPE60526FHSB6, with the North American Industry Classification System code 541512 indicating it falls under computer systems design services. The obligation is part of a broader DOD initiative to enforce standardized cybersecurity practices among its supply chain partners.