Cybersecurity Compliance for Suppliers (NIST SP 800-171)

The contract requires suppliers to implement and maintain cybersecurity safeguards aligned with NIST Special Publication 800-171 to protect controlled unclassified information used in contract performance. This subcontract is under the Department of Defense’s ASC Commodities Division and applies to systems handling sensitive data related to defense contracting activities. Compliance with NIST SP 800-171 includes adopting specific security controls across access, audit, configuration, identification, media protection, personnel security, physical protection, risk assessment, system and communication, and system and information integrity domains to ensure the confidentiality and integrity of CUI. The solicitation was posted on May 11, 2026, with responses due by May 19, 2026, and the place of performance is listed as FPO with ZIP code 96670. The NAICS code 541512 identifies the scope as computer systems design and related services, suggesting the work involves technical implementation and ongoing maintenance of cybersecurity measures. This subcontract does not have a set-aside designation and is open to qualified vendors meeting the federal cybersecurity requirements. Interested parties must access the official solicitation link to submit proposals and confirm detailed technical and compliance expectations.