Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to protect covered defense information handled by the contractor. This includes establishing, monitoring, and updating technical, administrative, and physical safeguards to ensure compliance with federal cybersecurity standards for defense contractors. The contractor must also establish and operate a robust incident reporting process to promptly identify, contain, and report any cybersecurity incidents involving covered defense information to the appropriate government authorities in accordance with mandated timelines and procedures. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under NAICS code 541512 for computer systems design services. The work is expected to support the secure handling of sensitive defense data and requires continuous adherence to federal cybersecurity requirements. The contract was posted on August 7, 2026, and is linked to the award number SPE7MX21D0057 with delivery order SPE7M126FZ157, indicating its integration into a broader defense contracting framework.