Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of safeguarding controls for contractor systems that handle Controlled Unclassified Information in accordance with NIST SP 800-171 standards. This subcontract is focused on ensuring that all relevant cybersecurity measures are properly deployed, validated, and maintained to protect CUI across the contractor’s information systems. The work involves a systematic evaluation of existing controls, identification of gaps, and execution of remediation efforts to achieve full compliance with the framework specified in NIST SP 800-171. The solicitation is issued under NAICS code 541512, indicating it is related to computer systems design services, and is managed by the Active Devices Division within the Department of Defense. The response deadline is August 17, 2026, with the requirement posted on August 5, 2026. The place of performance and point of contact details are not specified, but compliance obligations apply regardless of location, and all systems handling CUI must meet federal cybersecurity requirements. This subcontract is part of a broader effort by the Department of Defense to enforce mandatory cybersecurity standards across its supply chain.