Cybersecurity Compliance for Covered Contractor Information Systems

The contract requires implementation and maintenance of NIST SP 800-171 security controls across all covered contractor information systems that process, store, or transmit controlled unclassified information, ensuring full alignment with DFARS clauses 252.204-7008 and 52.240-93. This subcontract mandates comprehensive cybersecurity practices to protect CUI, including assessment, documentation, and continuous monitoring of security controls, with the expectation of compliance validation through automated or manual methods as prescribed by federal standards. The effort is scoped for systems supporting operations tied to the Department of Defense, specifically under the Aviation Supply Chain ESOC Buys office, with performance required at Fort Stewart, Georgia, 31314-0000. The contract is classified as a subcontract under NAICS code 541512 for Computer Systems Design Services, with a posted date of July 30, 2026, and a response deadline of August 7, 2026. Participation is open without a specific set-aside designation, and no point of contact information is provided in the data. Contractors must demonstrate ability to meet all NIST 800-171 requirements within the timeframe and maintain ongoing compliance throughout the contract period. All activities are subject to DOD oversight and audit, and failure to maintain control implementation may result in non-conformance action or termination. The UI link directs to the DIBBS platform for solicitation details, where full terms and technical requirements can be reviewed prior to submission.