Supply Chain Risk & Cybersecurity Compliance (NIST SP 800-171)

The contract entails the implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information within the supply chain, requiring full compliance with assessment protocols, timely incident reporting, and robust protection measures against unauthorized access or data breaches. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, mandates the adoption of standardized cybersecurity practices to ensure the integrity, confidentiality, and availability of sensitive information handled by contractors and subcontractors involved in defense-related operations. The work is classified under NAICS code 541512, indicating it involves computer systems design and related services, and focuses on delivering end-to-end cybersecurity compliance without reliance on external certifications or set-asides. Performance is expected to meet federal requirements for protecting controlled unclassified information across all phases of the supply chain, with accountability resting on the contractor to establish, maintain, and continuously monitor adherence to NIST controls through structured assessment and response procedures. The contract remains active and accessible through the DIBBS system under award number SPE7M126V048T.