Cybersecurity Compliance (NIST SP 800-171 / CMMC)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information within contractor systems, ensuring alignment with CMMC Level 1 or 2 compliance requirements. This effort is critical for protecting sensitive data handled on behalf of the Department of Defense and involves establishing robust cybersecurity practices that meet federal standards for information protection. The work is scoped as a subcontract under the Defense Logistics Agency and must be performed in support of operations tied to the FPO, 96673 location, with no specific city or state designated beyond the military postal code. Submission deadline for proposals is August 10, 2026, following a posted date of July 28, 2026, and the effort falls under NAICS code 541512, indicating it relates to computer systems design services. The contract does not specify a set-aside type or detailed point of contact, and all compliance activities must be conducted in accordance with federal requirements for handling controlled unclassified information. Contractors must demonstrate technical capability to deploy and sustain the necessary controls and be prepared for assessment or audit to verify adherence to the specified cybersecurity framework.