Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 for systems that process, store, or transmit covered defense information. This includes ensuring all required technical, operational, and management safeguards are properly configured, monitored, and documented to meet federal cybersecurity standards. Compliance is mandatory and must be sustained throughout the contract period, with continuous assessment and remediation of any gaps or deficiencies identified through internal audits or external evaluations. In addition to control implementation, the contract mandates immediate reporting of any cybersecurity incidents affecting covered defense information in accordance with DFARS 252.204-7012. This includes notifying the appropriate government authorities within required timeframes and providing detailed incident documentation, analysis, and corrective actions. Performance is tied to Hill Air Force Base with the NAICS code 541512 indicating information technology consulting services. As a subcontract, the work is part of a broader defense acquisition effort under the Department of Defense, with responses due by August 13, 2026, and the solicitation posted on August 5, 2026.