Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation of all NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within the designated system environment. This includes developing a comprehensive System Security Plan (SSP) that documents how each control is implemented, maintained, and verified, ensuring alignment with federal cybersecurity standards. The contractor must provide full support for a Department of Defense assessment, which will evaluate the effectiveness of the implemented controls and the accuracy of the SSP in meeting CUI protection requirements. The work is scoped as a subcontract under the Department of Defense's Land Supply Chain, with performance required at the location in Barstow, California, zip code 92311-5015. The North American Industry Classification System code is 541611, indicating the focus is on management consulting services, specifically in the cybersecurity compliance domain. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. While no set-aside type or point of contact is specified, the effort is critical to ensuring the DoD’s CUI remains protected under mandated federal frameworks.