Supply Chain Risk & Cybersecurity Compliance (NIST SP 800-171)

The contract requires strict adherence to NIST Special Publication 800-171 standards to protect controlled unclassified information throughout all phases of performance, ensuring robust cybersecurity measures are implemented and maintained. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, focuses on securing sensitive data within the supply chain and demands comprehensive compliance with the security requirements outlined in NIST SP 800-171 for systems handling such information. The work must be conducted in alignment with federal cybersecurity guidelines without exception, and the contractor is responsible for demonstrating continuous compliance during execution. The contract falls under NAICS code 541512, indicating it is related to computer systems design services, and was posted on June 9, 2026. While specific performance location and point of contact details are not provided, the obligation to safeguard controlled unclassified information applies regardless of where the work is performed. Compliance is non-negotiable and must be embedded into all operational processes, with no tolerance for lapses in security controls. The agreement is structured as a subcontract and is part of a broader DOD initiative to strengthen cybersecurity across its vendor network.