Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity safeguards for covered defense information systems in full alignment with NIST SP 800-171 standards. The scope includes establishing robust controls to protect sensitive information, ensuring continuous compliance through regular monitoring and adjustment, and promptly reporting any cyber incidents as mandated by federal requirements. Contractors must also conduct thorough self-assessments to validate adherence to the framework and document findings to demonstrate accountability and readiness for potential audits or reviews. The work is designated as a subcontract under the Department of Defense's Active Devices Division, with performance centered at Newport, Rhode Island, ZIP 02841-1703. It falls under NAICS code 541512 for computer systems design services and is targeted for submission by July 20, 2026. While no set-aside type is specified, the contract expects full compliance with all NIST SP 800-171 requirements and places significant emphasis on operational discipline in cyber defense, incident responsiveness, and accurate self-reporting to maintain the integrity of defense information systems.