Supply Chain Risk Management and Cybersecurity Compliance

This contract supports compliance with NIST SP 800-171 standards and conducts supply chain risk assessments for the Department of Defense under DFARS clauses, ensuring that cybersecurity requirements are met throughout the defense industrial base. The work is aimed at safeguarding controlled unclassified information within the DoD supply chain by identifying, evaluating, and mitigating risks associated with third-party vendors and subcontractors. The subcontract is issued under NAICS code 541512 for computer systems design services and is managed by the Defense Logistics Agency. Performance is tied to DoD-wide cybersecurity expectations, requiring adherence to federal standards for data protection and supply chain integrity. Although specific location details are not provided, the obligation extends to all locations where covered information is processed or stored, making it critical for contractors to implement consistent, auditable security controls across their operations.