Cybersecurity & CDI Compliance Support (NIST SP 800-171)

The contract requires the implementation and full documentation of NIST SP 800-171 security controls across all systems that handle covered defense information, ensuring alignment with federal cybersecurity standards for safeguarding sensitive data. This includes establishing robust processes for detecting, reporting, and responding to cyber incidents through the Defense Industrial Base Cybersecurity and Incident Reporting Portal (DIBNet), with strict adherence to mandated timelines and reporting formats. The scope extends to ensuring all subcontractors receive and comply with the same cybersecurity requirements through appropriate flow-down clauses, maintaining end-to-end compliance throughout the supply chain. All activities must be performed under the Department of Defense's Land Supply Chain organization, with performance localized to Greensboro, North Carolina, 27409. The effort is classified as a subcontract under NAICS code 541512, and response submissions are due by August 7, 2026. Full compliance is mandatory to meet contractual obligations, and documentation must be thorough enough to support audits and assessments by government entities. Failure to implement controls or report incidents properly may result in contract non-compliance and potential penalties.