Cybersecurity Compliance for Covered Defense Information (NIST SP 800-171)

This contract requires the implementation and annual assessment of NIST Special Publication 800-171 cybersecurity controls to safeguard covered defense information, ensuring compliance with federal requirements for protecting sensitive data within the defense supply chain. The scope includes establishing the necessary technical, administrative, and physical safeguards outlined in NIST SP 800-171 and conducting a formal annual evaluation to verify ongoing adherence to these controls, along with reporting any cyber incidents in accordance with mandated procedures. The work is structured as a subcontract under the Department of Defense and is tied to the NAICS code 541512, indicating it pertains to custom computer programming services related to cybersecurity. Performance is required at a designated location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 30, 2026, and responses are due by August 7, 2026, indicating a short submission window. This effort is part of a broader initiative to enforce cybersecurity standards across defense contractors and subcontractors, emphasizing continuous compliance and incident response readiness. All parties must ensure their systems and processes meet the stringent requirements for handling controlled unclassified information as defined by the Department of Defense.