Cybersecurity Compliance for Defense Contractors (NIST SP 800-171)

The contract requires the implementation and comprehensive documentation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information within contractor systems supporting the Department of Defense. This subcontract is focused on ensuring full compliance with federal cybersecurity standards for handling CUI, which includes assessing existing systems, identifying gaps, applying necessary technical and administrative safeguards, and producing documented evidence of control implementation for audit and compliance purposes. The work must be performed at Fort Riley, Kansas, with a ZIP code of 66442-0000, and is tied to the NAICS code 541512 for computer systems design services. The solicitation is issued under the Land Supply Chain agency and is open for response until August 21, 2026, with a posted date of August 10, 2026. All proposed solutions must align with NIST SP 800-171 requirements, which cover areas such as access control, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, security awareness, system and communications protection, and system and information integrity. Contractors must demonstrate proven experience in NIST 800-171 compliance projects and be prepared to support ongoing assessments, provide detailed documentation packages, and maintain continuous compliance throughout the contract lifecycle.