Cybersecurity Compliance (NIST SP 800-171)

The contract requires contractors to ensure their information systems comply with NIST SP 800-171 and DFARS 252.240-7997 to protect covered defense information, mandating the implementation of specific security controls to safeguard sensitive data handled in support of Department of Defense activities. Compliance is non-negotiable and must be fully achieved prior to contract performance, with systems subject to ongoing assessment and continuous adherence to the outlined cybersecurity standards. This is a subcontract opportunity under NAICS code 541512, issued by the Subsistence FSE Supply Chain under the Department of Defense, with performance required at FPO 09532. The solicitation was posted on July 29, 2026, and responses are due by August 3, 2026. Contractors must possess the technical capability and administrative infrastructure to meet federal cybersecurity requirements, including documentation, logging, access controls, incident response, and system monitoring as defined by NIST and DFARS. No set-aside information is provided, indicating the contract is open to all qualified eligible entities.