Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and documentation of NIST Special Publication 800-171 controls on systems that process, store, or transmit covered defense information, ensuring compliance with federal cybersecurity standards for defense contractors. The contractor must establish, validate, and maintain all required security controls to protect sensitive data and prepare comprehensive documentation demonstrating adherence to the framework. This includes defining policies, configuring systems, managing access controls, and ensuring continuous monitoring of the environment to meet the NIST requirements. In addition, the contractor is responsible for supporting cyber incident reporting procedures, enabling timely detection, response, and notification of any security breaches or anomalies affecting covered defense information. All activities must be performed at the designated place of performance in San Diego, California, with deliverables aligned to the NAICS code 541512 for computer systems design services. The solicitation is structured as a subcontract under the Department of Defense and is open for responses until August 3, 2026. The successful bidder will be expected to deliver a fully compliant and auditable cybersecurity posture that meets Defense Logistics Agency expectations for safeguarding federal contract information.