Cybersecurity Compliance for Controlled Technical Data

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information associated with design and manufacturing data. This includes ensuring all systems and processes handling such data meet the required cybersecurity standards to prevent unauthorized access, disclosure, or compromise. The subcontractor must establish, document, and sustain a compliant security posture aligned with federal guidelines, with continuous monitoring and adjustment as needed to address evolving threats and regulatory requirements. In addition to technical implementation, the contract mandates accurate and timely SPRS reporting to demonstrate compliance status and track progress against NIST controls. Performance is tied to the location in Barstow, California, with all activities centered around protecting sensitive technical data for the Department of Defense’s ASC Commodities Division. The opportunity is solicited as a subcontract under NAICS code 541512, with responses due by May 13, 2026, and the posting date reflecting the initial opening on May 5, 2026. The scope requires operational readiness and documented proof of adherence to federal cybersecurity frameworks throughout the contract term.