Cybersecurity Compliance for Defense Suppliers (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 compliance to protect covered defense information across all systems and communication channels. The scope centers on ensuring robust cybersecurity controls are in place to meet federal standards for safeguarding sensitive data handled by defense suppliers, with a focus on securing information throughout its lifecycle. Compliance must be demonstrated across all relevant technical and administrative domains outlined in the NIST framework, including access control, audit and accountability, risk assessment, and system and communications protection. The contract is classified as a subcontract under the NAICS code 541611, indicating it pertains to computer systems design services, and is issued through the Department of Defense’s Land Supply Chain office. Performance is expected to occur at the FPO location with a ZIP code of 34088. The solicitation was posted on May 11, 2026, and responses are due by May 22, 2026. Contractors must be prepared to document, enforce, and continuously monitor compliance activities, as failure to adhere to NIST SP 800-171 requirements could result in contract termination or loss of eligibility for future defense work.