Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with cyber incident reporting requirements mandated by DFARS 252.204-7012. This subcontract is part of a broader effort by the Defense Logistics Agency under the Department of Defense to enforce robust cybersecurity standards across its supply chain, focusing on protecting sensitive unclassified information handled by contractors. The work is to be performed at Fort Bliss, Texas, with a submission deadline of August 20, 2026, and is classified under NAICS code 541512 for computer systems design services. All aspects of the NIST framework must be fully integrated into the contractor’s operations, including the development of a System Security Plan and evidence of control implementation across all relevant domains such as access control, audit, configuration management, and incident response. Compliance is non-negotiable and will be subject to verification, as failure to meet requirements may result in contract termination or penalties. The contractor is expected to maintain continuous adherence to these standards throughout the contract period and to immediately report any cyber incidents affecting covered defense information in accordance with federal directives.