Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and maintenance of NIST SP 800-171 security controls on systems that process, store, or transmit covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive DoD data. This includes establishing technical, administrative, and physical safeguards to protect information systems and ensuring ongoing adherence to the control requirements outlined in the NIST framework. The contractor is also obligated to promptly detect, report, and respond to any cyber incidents affecting these systems in accordance with DoD reporting protocols, including submission of required incident reports through designated channels. The contract is a subcontract solicited under NAICS code 541512, tied to the Department of Defense’s Medical Supply Chain MD Surg FSF within the Travis AFB area with a zip code of 94535-1825. The response deadline for proposals is August 3, 2026, and the solicitation was posted on July 28, 2026. The work is performed at a specific DoD location, and while no point of contact is listed, the contracting activity is routed through the DIBBS platform, indicating formal procurement under government contracting procedures. Compliance is mandatory and non-negotiable, with failure to meet NIST 800-171 requirements or incident reporting obligations potentially resulting in contract termination or penalties.