Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation, assessment, and documentation of NIST SP 800-171 security controls to protect controlled unclassified information within a subcontractor environment governed by DFARS clauses 252.240-7997 and 252.204-7012. The work is centered on ensuring full compliance with federal cybersecurity standards for handling sensitive but unclassified data, with a focus on establishing, validating, and maintaining a robust cybersecurity posture across all relevant systems and processes. The contractor must produce detailed documentation demonstrating adherence to all 110 control requirements outlined in NIST SP 800-171 and provide evidence of effective implementation through assessments and audits. The task is part of a subcontract under the Department of Defense, specifically for the Electrical Devices Division, and is performance-based at a location in San Diego, California, with a zip code of 92136-3581. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The NAICS code 541512 indicates this effort falls under computer systems design services, suggesting the work involves technical implementation and consulting on cybersecurity frameworks rather than hardware procurement. The subcontractor must be prepared to operate under strict DoD compliance requirements and deliver verifiable outcomes that align with federal mandates for protecting CUI in non-federal systems.