Cybersecurity and NIST SP 800-171 Compliance Support

The contract requires strict adherence to NIST SP 800-171 standards for protecting controlled unclassified information, mandating the implementation of all applicable security controls to safeguard systems and data handled under the agreement. Compliance is non-negotiable, and the contractor must establish and maintain robust cybersecurity safeguards aligned with the framework, including access controls, audit logging, media protection, and incident response procedures. Any cyber incident affecting covered systems must be reported to the appropriate government authorities within 72 hours of discovery, ensuring timely visibility and coordinated response. The work is classified as a subcontract under NAICS code 541512, with performance expected at Hill Air Force Base, Utah, 84056-5734, under the oversight of the Department of Defense through Depot Hill. The solicitation was posted on July 9, 2026, with responses due by July 20, 2026.