Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity safeguards to protect controlled unencrypted information (CUI) on systems operated by the contractor, strictly adhering to the requirements of DFARS and NIST Special Publication 800-171. All security controls must be fully configured, tested, and documented to demonstrate compliance, ensuring the confidentiality, integrity, and availability of CUI throughout its lifecycle. The work is scoped to include assessments of current security postures, remediation of gaps, policy development, employee training, and ongoing monitoring to maintain continuous compliance. This is a subcontract under the Department of Defense’s Strategic Acquisition Program Directorate, with performance located in Barstow, California, ZIP code 92311-5014. The NAICS code 541512 indicates the work falls under computer systems design services, emphasizing technical expertise in cybersecurity architecture and compliance. The solicitation was posted on July 16, 2026, with responses due by July 27, 2026, and all deliverables must align with federal mandates for protecting sensitive unclassified information. Failure to meet the specified controls may result in contract non-compliance and potential penalties.