Cybersecurity & Data Safeguarding (NIST SP 800-171)

This contract requires the implementation and assessment of cybersecurity controls for contractor information systems that process, store, or transmit federal contract data, in strict alignment with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012. The work focuses on ensuring the confidentiality, integrity, and availability of controlled unclassified information within information systems used by subcontractors supporting the Department of Defense, mandating full compliance with the 110 security requirements outlined in NIST SP 800-171. The assessment component includes documentation of control implementation, evidence collection for audit readiness, and validation of remediation efforts where gaps are identified, all to be completed by the response deadline of July 27, 2026. Performance occurs remotely under the place of performance designation of FPO, 34087, with no specific geographic restrictions beyond secure, compliant handling of sensitive data. The contract is structured as a subcontract under NAICS code 541512 for Computer Systems Design Services, and the acquiring agency is the Land Supply Chain within the Department of Defense, requiring contractors to demonstrate proven experience in federal cybersecurity compliance and the ability to operate under stringent DOD data protection standards.