Supply Chain Compliance and Risk Management Support

The contract requires advisory or audit support to ensure compliance with the Defense Federal Acquisition Regulation Supplement clause 252.239-7018 and the National Institute of Standards and Technology Special Publication 800-171, focused on safeguarding covered defense information within the supply chain. The work involves evaluating and reinforcing cybersecurity practices to meet federal mandates designed to protect sensitive government data handled by contractors and subcontractors. This support is critical for maintaining the integrity of defense-related information systems and ensuring adherence to standardized security controls outlined in NIST SP 800-171. The contract falls under the NAICS code 541611 for management consulting services and is classified as a subcontract with the Defense Logistics Agency, a component of the Department of Defense. It is posted for potential participation by firms capable of delivering specialized compliance and risk management expertise related to cybersecurity in defense supply chains. Performance of the contract is not restricted to a specific geographic location, allowing for flexible execution, while the solicitation remains open for entities with the technical capability to audit and advise on compliance frameworks governing the protection of controlled unclassified information in nonfederal systems.