Cybersecurity Compliance (NIST SP 800-171 / DFARS 252.204-7012)

The contract requires full implementation and documentation of NIST SP 800-171 cybersecurity controls to protect covered defense information in accordance with DFARS 252.204-7012. This includes developing and maintaining a comprehensive System Security Plan that outlines how security controls are applied, a Plan of Action and Milestones to address any remaining deficiencies, and established procedures for reporting cyber incidents as mandated by federal regulations. The work must be completed to ensure compliance across all applicable systems handling controlled unclassified information related to defense contracts. The effort is designated as a subcontract under the NAICS code 541512 for computer systems design services and is tied to a Department of Defense activity located in Charleston with a ZIP code of 29402. The solicitation was posted on July 16, 2026, and responses are due by July 31, 2026. While no set-aside type is specified, the requirement is strictly focused on achieving and documenting cybersecurity compliance, with performance occurring at the designated location. The contractor must ensure all processes, documentation, and operational practices align with federal cybersecurity standards and are fully auditable at any time.