Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the contractor’s systems, ensuring alignment with federal cybersecurity standards. This includes the development of a comprehensive System Security Plan that documents the organization’s approach to protecting CUI, covering policies, procedures, and technical safeguards. The contractor must also complete and submit a Basic Assessment through the Supplier Performance Risk System to validate compliance with the required controls and demonstrate readiness for federal cybersecurity obligations. This subcontract is issued by the Department of Defense through its ASC Commodities Division and is performance-based at Greensboro, North Carolina, with a ZIP code of 27409. The solicitation is classified under NAICS code 541512, indicating it pertains to computer systems design services. The response deadline is May 18, 2026, and all deliverables must be completed in accordance with federal regulatory requirements. The contractor will be responsible for ensuring all security controls are fully documented, implemented, and assessed, with the submission of the Basic Assessment being a critical milestone to confirm compliance and enable continued eligibility for defense-related work involving CUI.