Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation of cybersecurity protections in full alignment with NIST Special Publication 800-171 to safeguard covered defense information handled by the subcontractor. The requirements mandate the adoption of specific security controls designed to protect the confidentiality, integrity, and availability of sensitive data transmitted, stored, or processed in connection with defense-related activities. Compliance must be maintained throughout the performance of the subcontract and includes documented policies, procedures, and technical measures that meet the NIST standard’s comprehensive framework for protecting controlled unclassified information. The subcontractor is also obligated to promptly report any cyber incidents affecting the covered defense information, following the reporting protocols established under federal regulations. This includes immediate notification of breaches or suspected compromises and providing required forensic data to the contracting authority. The contract falls under the Defense Logistics Agency of the Department of Defense and is classified under NAICS code 541512 for computer systems design services. Performance is expected to adhere strictly to federal cybersecurity mandates without exception, and failure to comply may result in contractual penalties or termination. The contract was posted on July 20, 2026, and is structured as a subcontract under a larger federal procurement framework.