Cybersecurity Compliance and Incident Reporting (NIST SP 800-171)

The contract requires full implementation of NIST Special Publication 800-171 security controls to protect covered defense information on systems operated by the contractor, in strict alignment with DFARS clause 252.204-7012. This includes establishing and maintaining a comprehensive cybersecurity framework that ensures the confidentiality, integrity, and availability of sensitive data, with specific attention to access control, audit logging, configuration management, incident response, and continuous monitoring. All systems handling such information must meet the baseline requirements outlined in NIST SP 800-171 and be capable of reporting cyber incidents promptly and accurately to the Department of Defense as mandated. The work is to be performed at the designated place of performance in Barstow, California, with a zip code of 92311-5014, under a subcontract structure within the NAICS code 541512 for computer systems design services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, with the contracting entity being the Fluid Handling Division of the Department of Defense. Compliance with incident reporting protocols is non-negotiable, requiring immediate notification of any cybersecurity breaches or anomalies that may compromise covered defense information, and the contractor must demonstrate documented readiness for assessment and audit by government representatives.