Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to protect covered defense information and ensure compliance with DFARS 252.204-7012, which mandates cybersecurity requirements for contractors handling controlled unclassified information. This includes establishing robust technical, administrative, and physical safeguards aligned with the NIST framework and maintaining complete records to demonstrate adherence to all specified controls. The contractor must also be prepared to respond to and report any cyber incidents in accordance with federal requirements, ensuring timely and accurate notification procedures are in place and tested. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, classified under NAICS code 541512 for computer systems design services. The work is scoped to support federal cybersecurity obligations, with no specific geographic restrictions noted for performance location. The solicitation was posted in June 2026, indicating the contract is targeted for future award, and is intended to enhance the security posture of defense information systems through rigorous compliance efforts. All activities must align strictly with federal cyber standards to ensure ongoing eligibility for defense-related work.