Cybersecurity Compliance and Reporting (NIST SP 800-171 Implementation)

The contract mandates the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information within the designated systems. This includes conducting a thorough system assessment to verify compliance with all required controls, preparing comprehensive documentation to demonstrate adherence, and establishing procedures for timely cyber incident reporting in accordance with federal requirements. The performance scope covers both initial configuration and continuous monitoring to ensure sustained compliance with the standards throughout the contract period. The subcontract is associated with the Department of Defense and will be performed in San Diego, CA, with a NAICS code of 541512 indicating it falls under custom computer programming services. The solicitation was posted on June 25, 2026, and responses are due by July 6, 2026. Although no specific point of contact or set-aside details are provided, the focus remains on securing sensitive defense data through rigorous cybersecurity practices aligned with NIST guidelines, and all activities must be executed at the specified place of performance in San Diego.