Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and assessment of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS cyber incident reporting requirements. This effort is focused on establishing a robust cybersecurity posture aligned with federal standards for handling sensitive government data, specifically within a small business context as designated by the SBA Total Small Business Set-Aside. The work must be performed at the designated location in Tracy, California, with a zip code of 95304-5000, and is classified under NAICS code 541512 for computer systems design services. All performance obligations must be fulfilled by a small business entity, and responses to the solicitation are due by August 3, 2026, following a posting date of July 23, 2026, under the subcontract type. The contracting office is the Active Devices Division within the Department of Defense, and the project is accessible via a dedicated DIBBS platform link for further reference.