Cybersecurity Compliance for Contractor Information Systems

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls within contractor information systems to safeguard controlled unclassified information as mandated by DFARS clause 252.240-7997. This obligation applies to all systems handling CUI and demands full compliance with the specified security requirements, including proper configuration, monitoring, and documentation of controls to ensure consistent protection of sensitive data. The contractor must demonstrate readiness to undergo evaluation to verify adherence and maintain an ongoing state of compliance throughout the performance period. The solicitation is issued as a subcontract under the NAICS code 541512 for computer systems design services, with a response deadline of August 7, 2026, and a performance location in San Diego, California, ZIP 92136-5299. The contracting entity is the Department of Defense, specifically under the Land Supplier Operations Engines office. While no set-aside designation is specified, interested parties must respond by the deadline and ensure their systems and processes are aligned with federal cybersecurity standards to qualify for award. All activities must be conducted in strict accordance with the referenced DFARS clause and NIST guidelines to meet the government's information protection requirements.