Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. This includes the development of a System Security Plan that documents how the required controls are implemented, maintained, and monitored across all relevant systems and environments. The contractor must establish processes to detect, respond to, and report any cyber incidents within 72 hours of discovery, adhering strictly to the timeframe and reporting protocols mandated by the Department of Defense. This subcontract, issued under the Maritime Supply Chain division of the Department of Defense, is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on August 4, 2026, with responses due by August 19, 2026. While no specific location is specified for performance, the work is tied to protecting defense information and must align with DOD cybersecurity requirements regardless of geographic placement. The contractor must be prepared to demonstrate full adherence to NIST SP 800-171 controls and maintain documentation to support audit readiness throughout the contract period.