Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires full implementation and documentation of safeguarding measures for covered defense information in alignment with NIST SP 800-171 standards, encompassing system assessments, development and maintenance of cybersecurity policies, and timely reporting of cyber incidents. All activities must ensure compliance with federal requirements for protecting sensitive information transmitted, processed, or stored on information systems associated with defense contracts. The scope includes establishing technical and administrative controls, conducting continuous monitoring, and maintaining audit trails to demonstrate adherence throughout the contract lifecycle. This is a small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense through the RED RIVER RECEIVING BLDG office, with performance required at 75507-5000 in Texarkana. The solicitation closed on July 30, 2026, and was posted on July 19, 2026. Contractors must demonstrate capability to meet stringent cybersecurity obligations as defined by NIST SP 800-171 and be prepared to undergo evaluations verifying compliance, policy effectiveness, and incident response readiness. No alternative bidding mechanisms are permitted under this total small business set-aside designation.