Cybersecurity Compliance for Covered Defense Information (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information within the contractor’s systems. All security requirements must be enforced to ensure compliance with federal standards for protecting sensitive military data, and any detected cyber incidents must be reported to the appropriate authorities within 72 hours of discovery. The work is structured as a subcontract under the Department of Defense, specifically tied to the LAND SUPPLY CHAIN office, with performance taking place at Davis Monthan Air Force Base in Arizona. The NAICS code 541512 indicates the focus is on computer systems design services, suggesting the contractor will be providing technical expertise to establish or enhance cybersecurity infrastructure. The solicitation was posted on August 10, 2026, with proposals due by August 21, 2026, and the contract is not set aside for any specific small business category.