Cybersecurity Compliance & Incident Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls in accordance with NIST SP 800-171 for systems that process, store, or transmit covered defense information. This includes ensuring full compliance with all 110 requirements outlined in the standard, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response. The successful bidder must establish and sustain a robust cybersecurity posture that meets Department of Defense expectations for protecting sensitive information and must be prepared to demonstrate continuous adherence through documentation, assessments, and audit readiness. In addition to implementing the NIST controls, the contractor is responsible for timely and accurate cyber incident reporting in alignment with DOD requirements. This involves detecting, analyzing, and reporting security breaches or anomalies to the appropriate government authorities within mandated timeframes. The work is performed at the specified place of performance in Tracy, California, with a response deadline of August 3, 2026. As a subcontract under the NAICS code 541512 for computer systems design services, the effort supports the ACTIVE DEVICES DIVISION of the Department of Defense and demands a high level of technical precision, procedural discipline, and adherence to federal cybersecurity standards.