Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls to safeguard Controlled Unclassified Information in alignment with DFARS regulations and NIST SP 800-171 standards. The work involves establishing, testing, and maintaining a comprehensive cybersecurity framework that meets federal requirements for protecting sensitive government data within contractor systems. All processes must be thoroughly documented to demonstrate compliance, including policies, procedures, access controls, system monitoring, incident response, and continuous assessment measures. The contract is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance based at Fort Campbell, Tennessee, 42223. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and falls under NAICS code 541512 for computer systems design services. The focus is strictly on achieving and validating NIST SP 800-171 compliance, with no set-aside provisions indicated. The successful contractor must deliver a fully operational and auditable cybersecurity environment capable of withstanding federal scrutiny and ensuring the integrity, confidentiality, and availability of CUI.