Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of all NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within contractor systems, ensuring compliance with federal cybersecurity standards. This includes configuring systems, establishing policies and procedures, and maintaining detailed records to demonstrate adherence to each control requirement. The contractor must also prepare for and support audit readiness by ensuring all controls are properly tested, monitored, and verifiable, with documentation readily available for review by federal auditors or assessors. The solicitation is a subcontract under the Department of Defense, specifically managed by the Active Devices Division, with performance expected to occur in Tracy, California, ZIP 95304-5000. It is classified under NAICS code 541512 for computer systems design services and has a response deadline of August 3, 2026. While no set-aside designation or point of contact is specified, the contract emphasizes full compliance with NIST guidelines, requiring not only technical implementation but also operational and administrative rigor to maintain CUI protection across the entire system environment.