Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of cybersecurity controls as outlined in NIST Special Publication 800-171 for systems that handle covered defense information. This includes establishing, maintaining, and verifying compliance with all mandated security requirements to protect sensitive data from unauthorized access, disclosure, or compromise. Continuous adherence to these controls is mandatory, with an annual self-assessment to evaluate the effectiveness of the implemented measures and to identify any gaps or areas needing improvement. In addition to compliance and assessment, the contractor is responsible for timely and accurate incident reporting in accordance with federal requirements. Any cybersecurity incident involving covered defense information must be reported immediately to the appropriate authorities, ensuring rapid response and mitigation. The work is classified as a subcontract under NAICS code 541512, with performance located in San Diego, California, and responses are due by July 21, 2026. The effort is part of a broader Department of Defense initiative to enforce stringent cybersecurity standards across the defense industrial base.