Cybersecurity Compliance for Controlled Technical Data (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls for systems that handle controlled uncontrolled information, specifically aligned with NIST SP 800-171 and DFARS regulatory requirements. This subcontract focuses on ensuring that technical data subject to CUI protections is safeguarded through compliant technical, administrative, and physical controls, as defined by federal standards for non-federal systems processing sensitive government information. The effort involves not only deploying required security measures but also conducting a rigorous evaluation to validate adherence to the framework across all applicable systems and environments. Performance is expected at Hill Air Force Base with a zip code of 84056-5734, under the purview of the Department of Defense’s Fluid Handling Division. The solicitation was posted on July 26, 2026, with a response deadline of August 6, 2026, indicating a competitive bidding window of approximately two weeks. The NAICS code 541512 categorizes this effort under computer systems design services, suggesting the contractor must possess expertise in technical implementation, risk assessment, and compliance verification. The contract is structured as a subcontract, meaning the prime contractor will likely manage oversight while the selected vendor delivers the specialized cybersecurity services necessary to meet federal compliance mandates.