Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across systems that process, store, or transmit covered defense information. This includes establishing technical, administrative, and physical safeguards to protect sensitive data in compliance with federal requirements, with a focus on continuous adherence to the specified framework. Annual assessments are mandated to verify the effectiveness of these controls, and any cyber incidents affecting the system must be reported promptly in accordance with established protocols. The work is to be performed at a designated location in Phoenix, Arizona, with a subcontract structure indicating it is part of a larger defense-related project under the Department of Defense. The NAICS code 541512 identifies the nature of the services as computer systems design and related activities. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, allowing interested parties a limited window to submit proposals. The contractor must ensure full alignment with government cybersecurity standards and maintain documentation to demonstrate ongoing compliance throughout the term of the agreement.