Cybersecurity Compliance Implementation (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls on contractor information systems that process, store, or transmit covered defense information. This includes the development of a System Security Plan to document how each control is addressed, conducting a Supplier Performance Risk System assessment to evaluate cybersecurity posture, and establishing procedures for timely cyber incident reporting in compliance with federal requirements. The work is scoped to ensure continuous alignment with NIST standards throughout the lifecycle of the information system, with emphasis on securing sensitive data against evolving threats. This subcontract is issued under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 6, 2026, with responses due by July 27, 2026. Performance is expected to occur wherever the contractor operates systems handling covered defense information, with no specific geographic limitations indicated. Participation requires proven capability in government cybersecurity compliance frameworks and the ability to document, assess, and report on security control effectiveness in accordance with DoD expectations.