Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the aerospace manufacturing and logistics domain. This effort is focused on achieving full compliance with federal cybersecurity standards to ensure the protection of sensitive data handled by subcontractors supporting naval weapon systems. The work must be completed in alignment with the specific technical and procedural requirements outlined in NIST SP 800-171, including the systematic assessment, remediation, and formal documentation of all 110 controls across access, audit, configuration, identification, and incident response domains. This is a subcontract under the Department of Defense, managed by Navsup Weapon Systems Support, with a response deadline of May 28, 2026. The NAICS code 541512 indicates the work falls under custom computer programming services, suggesting the need for specialized cybersecurity engineering and compliance expertise. The place of performance is not specified, implying the work may be conducted remotely or at multiple contractor locations, as long as the cybersecurity objectives for protecting CUI are met. There is no set-aside type indicated, meaning all eligible contractors may compete, and the successful party must be prepared to provide verifiable evidence of compliance to meet Defense Federal Acquisition Regulation Supplement obligations.