Cybersecurity Compliance for Contractor Systems (NIST SP 800-171)

This contract requires the implementation and assessment of NIST Special Publication 800-171 controls to safeguard controlled unclassified information on contractor systems, ensuring compliance with federal cybersecurity standards for protecting sensitive but unclassified data. The work must be performed at Robins Air Force Base, Georgia, with all systems and processes aligned to meet the specific requirements outlined in NIST SP 800-171, including administrative, technical, and physical safeguards tailored to the handling of CUI. Contractors are expected to demonstrate full adherence through documented policies, system configurations, and validated assessments that confirm control effectiveness and ongoing compliance. The contract is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with the NAICS code 541512 indicating it falls under computer systems design services. The solicitation was posted on August 4, 2026, and responses are due by August 12, 2026. All work must be completed in accordance with DoD cybersecurity mandates, and any non-compliance may result in contractual penalties or termination. The contractor must ensure that their systems, personnel, and procedures are fully prepared for evaluation and audit against the established NIST framework without relying on external certifications, focusing instead on demonstrable, operational implementation of required controls.