Cybersecurity Compliance (NIST SP 800-171)

The contract requires full support for NIST SP 800-171 compliance across all systems handling Controlled Unclassified Information, encompassing the implementation of all required security controls to protect CUI at rest, in transit, and in use. This includes establishing and maintaining an authorized system environment that meets the federal standards for protecting sensitive government data, with documentation and evidence of control execution to be readily available for audit or assessment. The contractor must also ensure adherence to DFARS 252.204-7012, which mandates timely reporting of cybersecurity incidents affecting the confidentiality, integrity, or availability of CUI, including coordination with the Department of Defense in the event of a breach or compromise. This is a subcontract opportunity under the Department of Defense, associated with LAND SUPPLIER OPNS ENGINES, with performance primarily located in Tracy, California, at the ZIP code 95304-5000. The North American Industry Classification System code is 541512, indicating the focus is on computer systems design services, suggesting the work involves technical implementation, integration, and ongoing monitoring of cybersecurity controls. The solicitation was posted on July 30, 2026, with a response deadline of August 10, 2026, and the full details are accessible via the DIBBS portal. Contractors must be prepared to demonstrate proven experience with NIST 800-171 frameworks and DFARS reporting obligations, as compliance is not optional but a core deliverable of this agreement.