Cloud and IT Security Compliance (NIST SP 800-171)

The contract supports the implementation of NIST SP 800-171 Revision 2 and DFARS cybersecurity requirements for systems that handle controlled unclassified information, ensuring adherence to federal standards for protecting sensitive defense data. It is structured as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services. The work involves configuring, assessing, and maintaining security controls aligned with NIST guidelines to meet compliance obligations for information systems operating in defense supply chain environments. Performance of this contract is expected to occur across unspecified locations with no designated point of contact or place of performance details provided. The solicitation was posted on July 14, 2026, and is accessible through the DIBBS portal, though no set-aside status or competitive preferences are indicated. The subcontractor is responsible for executing technical measures that enable the defense contractor to demonstrate full compliance with cybersecurity frameworks mandated for handling controlled unclassified information, without reliance on third-party certification or external audit documentation beyond internal implementation and documentation.