Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 security controls across all covered contractor information systems to ensure compliance with federal cybersecurity standards for protecting controlled unclassified information. This includes configuring and maintaining technical, administrative, and physical safeguards to meet the 110 security requirements outlined in the NIST publication, with an emphasis on system integrity, access control, audit logging, and continuous monitoring. The contractor must also establish and sustain a robust cyber incident reporting capability, enabling timely detection, analysis, and reporting of cybersecurity incidents to the appropriate federal authorities as mandated by law and regulation. The work is performed under a subcontract for the Department of Defense through the Land Supply Chain office, with performance based at Cherry Point, North Carolina, 28533-5040. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and falls under NAICS code 541512 for computer systems design services. The contractor must demonstrate proven experience in deploying NIST 800-171 controls and managing incident reporting processes, ensuring full alignment with DoD cybersecurity expectations and operational requirements. Failure to maintain compliance or report incidents properly will result in contract violation and potential penalties.