Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to ensure compliance with federal information security standards for covered contractor information systems. A critical component includes the development and documentation of a comprehensive System Security Plan that outlines how the required controls are organized, applied, and managed across the environment. The contractor must also establish processes to detect, respond to, and report cyber incidents within a strict 72-hour window from identification, ensuring timely notification and remediation in accordance with federal requirements. All work is to be performed at the designated location in San Diego, California, with full responsibility for meeting the technical and procedural obligations associated with NIST SP 800-171 implementation and sustaining operational compliance. The contract is structured as a small business subcontract under a total small business set-aside, meaning only eligible small businesses may submit proposals, and it is classified under NAICS code 541512 for computer systems design services. Proposals must be submitted by the specified deadline in August 2026, and the activity is managed by the Department of Defense under the Construction & Equipment Manu & Con organization. While no point of contact is listed, the solicitation can be accessed through the DIBBS platform using the provided link, and all responders must ensure full alignment with the cybersecurity obligations tied to handling controlled unclassified information in accordance with the specified framework.