Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information in accordance with DFARS 252.204-7012 requirements. This includes establishing technical, operational, and managerial safeguards to protect sensitive data transmitted, processed, or stored by the contractor, as well as ensuring timely reporting of any cyber incidents that may impact the confidentiality, integrity, or availability of that information. Compliance is mandatory and must be sustained throughout the performance period to meet federal defense contracting obligations. The work is to be performed at the specified location in Newport, Rhode Island, under a subcontract arrangement categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on July 16, 2026, with a response deadline of July 24, 2026, and is managed by the Department of Defense under the ASC SUPPLIER OPER AE AND AF DIV. Contractors must be prepared to demonstrate full alignment with NIST controls and maintain documentation to validate compliance, while also having processes in place for incident response and reporting as dictated by DFARS regulations.