Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 standards to protect Covered Defense Information. This includes the implementation of all mandated security controls, regular assessment of compliance through a formal NIST SP 800-171 evaluation, and accurate reporting of assessment results via the Supplier Performance Risk System. The effort is focused on ensuring full adherence to federal cybersecurity requirements for handling sensitive defense data, with strict obligations to detect, respond to, and report any cyber incidents promptly in accordance with federal regulations. The work is structured as a subcontract under the Department of Defense, specifically managed by the Aviation Supply Chain ESOC Buys office, with performance expected to occur in Hattiesburg, Mississippi, at the designated ZIP code. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. The NAICS code 541611 indicates the work pertains to management, scientific, and technical consulting services, emphasizing the need for specialized cybersecurity expertise rather than general IT support. Compliance with all security and reporting obligations is mandatory to fulfill contractual requirements and maintain eligibility for continued DoD work.