Supply Chain Compliance and Cybersecurity Support

The contract requires comprehensive supply chain risk management and cybersecurity compliance with all Defense Federal Acquisition Regulation Supplement requirements, specifically mandating adherence to NIST Special Publication 800-171 for the protection of controlled unclassified information. The scope centers on implementing and maintaining robust safeguards to secure CUI throughout the supply chain, ensuring all systems, processes, and third-party interactions meet federal cybersecurity standards. This includes conducting a formal assessment of NIST SP 800-171 controls, remediating any identified gaps, and sustaining continuous compliance through monitored and documented practices. As a subcontract under the Defense Logistics Agency, part of the Department of Defense, the work is governed by stringent federal security protocols and must be executed in alignment with defense-industrial base expectations. The contract carries no set-aside designation and is classified under NAICS code 541611, indicating it involves management, scientific, and technical consulting services focused on cybersecurity and compliance. Performance may occur at any location relevant to the subcontractor’s operations, with no specified physical performance site, and the contractor is expected to maintain full accountability for protecting sensitive defense data regardless of geographic or operational context.