Cybersecurity Compliance (NIST SP 800-171) and CUI Safeguarding

The contract requires strict implementation of NIST Special Publication 800-171 security controls to protect covered defense information and ensure compliance with the Department of Defense’s requirements for safeguarding controlled unclassified information. All applicable security measures must be fully integrated into the contractor’s systems and operational practices to mitigate risks and prevent unauthorized access, disclosure, or compromise of sensitive data. The contractor is obligated to maintain continuous compliance with these controls throughout the performance period and must have documented procedures in place for monitoring, assessing, and reporting on security posture. In addition to safeguarding CUI, the contract mandates adherence to DFARS 252.204-7012 for cyber incident reporting, requiring immediate notification and detailed documentation of any cybersecurity incidents affecting covered defense information or the contractor’s systems. The incident response protocol must align with DOD standards and include swift containment, investigation, and reporting to the appropriate government authorities. Performance is tied to the location in Barstow, California, and the work falls under NAICS code 541512, indicating it involves computer systems design and related services. The solicitation closed on August 17, 2026, and the contract is structured as a subcontract under the Department of Defense’s procurement framework.