Cybersecurity Compliance for CUI (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within contractor systems. This effort is essential to ensure compliance with federal cybersecurity standards for handling sensitive but unclassified data, particularly in environments supporting Department of Defense operations. The work must be performed at the designated location in Twenty-Nine Palms, CA, with the contractor responsible for establishing, auditing, and continuously monitoring security measures aligned with the NIST framework to protect CUI from unauthorized access, disclosure, or compromise. The contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services, and is issued by the Land Supply Chain organization within the Department of Defense. Although no set-aside type is specified, the solicitation is open to eligible subcontractors who meet the cybersecurity requirements and can demonstrate capability in deploying NIST SP 800-171 controls. Proposals must be submitted by the deadline of July 31, 2026, and adherence to all security requirements will be a prerequisite for award and continued performance. Failure to maintain compliance will result in contract nonconformance and potential termination.