Cybersecurity Compliance & Reporting (NIST SP 800-171)

This contract involves the implementation and ongoing maintenance of cybersecurity controls based on the NIST SP 800-171 standard, specifically aimed at protecting covered defense information. It includes the development of Plans of Action and Milestones (POA&M) to address any security gaps and requires regular reporting on cyber incidents to ensure compliance. The work is designated as a subcontract under the North American Industry Classification System code 541512, which pertains to computer systems design services. The contract is issued by the Department of Defense's San Diego office, with the place of performance located in San Diego, California, zip code 92136-3581. The solicitation was posted on May 8, 2026, and responses are due by May 22, 2026. The scope is focused on ensuring that cybersecurity requirements for handling sensitive defense information are met and maintained throughout the subcontract period. Further information and submission details are available through the Defense Industrial Base Data Sharing portal.