Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires the implementation, self-assessment, and thorough documentation of all NIST SP 800-171 controls to ensure the protection of covered defense information in alignment with DFARS requirements. This effort is focused on establishing a compliant cybersecurity posture across all systems and processes that handle sensitive defense data, with an emphasis on accurate recordkeeping and internal evaluation to demonstrate adherence to federal standards. The work must be completed by the specified deadline and performed at Hill Air Force Base, Utah, with all deliverables tied directly to maintaining the integrity and confidentiality of controlled unclassified information. As a subcontract under the Department of Defense, this engagement is governed under NAICS code 541512 and must satisfy all contractual obligations without reliance on set-aside provisions. The response deadline is set for August 17, 2026, and the performance location is clearly defined at Hill AFB with a zip code of 84056-5734. Compliance is not optional; failure to meet the NIST SP 800-171 control requirements or to document them properly will result in non-conformance, potentially impacting ongoing operations and future contracting eligibility. The contractor must ensure that all assessments are rigorous, well-documented, and ready for audit at any time by government representatives.