Supply Chain Risk Management & NIST SP 800-171 Assessment

The contract requires the implementation and ongoing assessment of cybersecurity safeguards for covered contractor information systems in strict alignment with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This includes the development and maintenance of a System Security Plan, the creation and regular updating of a Plan of Actions and Milestones, and the conduct of a comprehensive self-assessment to validate compliance. All activities must ensure the protection of controlled unclassified information processed, stored, or transmitted on contractor systems. The contract is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. It is focused on supply chain risk management and centers on enforcing robust cybersecurity controls across the contractor’s information systems. The work is mandated to be performed in support of DoD operations, with compliance obligations continuously monitored through documentation, reassessment, and reporting. The contract was posted on July 20, 2026, and the performance location details are unspecified, indicating potential flexibility or that the work is distributed across contractor-operated environments.