Cybersecurity and Information Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to protect covered defense information in accordance with NIST SP 800-171 standards, with a primary focus on developing a System Security Plan (SSP) that documents the organization's security posture and control implementation. The scope encompasses all technical, administrative, and physical safeguards necessary to meet federal requirements for safeguarding sensitive defense data, ensuring continuous compliance through assessment, monitoring, and remediation activities. The work is to be performed in support of the ASC Commodities Division under the Department of Defense, with the place of performance designated as FPO 09582. This is a subcontract opportunity with a NAICS code of 541512, indicating services in computer systems design and related activities. The solicitation was posted on July 6, 2026, with a response deadline of July 14, 2026, and is accessible through the DIBBS platform. There is no type of set-aside specified, meaning the contract is open to all qualified entities without preference for small business, minority-owned, or other categories. Compliance with NIST SP 800-171 is mandatory, and the contractor must be prepared to demonstrate complete adherence through documentation, audits, and continuous improvement of security controls throughout the performance period.