Cybersecurity Compliance for Covered Contractor Systems (NIST SP 800-171)

This contract involves the implementation and documentation of NIST SP 800-171 safeguarding measures for contractor information systems that handle covered defense information. The focus is on ensuring compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which governs cybersecurity requirements for defense contractors, including mandatory cyber incident reporting protocols. The contract is a subcontract opportunity posted by the Department of Defense’s ASC Commodities Division, with the work to be performed in San Diego, California. The solicitation was posted on May 17, 2026, with a response deadline of May 26, 2026. The contract falls under NAICS code 541512, which relates to computer systems design services. The scope requires a thorough understanding of the NIST SP 800-171 cybersecurity framework and the ability to apply it effectively to safeguard sensitive defense information while meeting all regulatory requirements and reporting obligations. This ensures contractor systems are resilient against cyber threats and compliant with federal defense cybersecurity standards.