Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls in alignment with NIST SP 800-171 for systems that handle covered defense information, ensuring compliance with Department of Defense requirements. This includes establishing and sustaining the full suite of security controls mandated by the standard to protect sensitive data and enable accurate reporting through the DoD’s assessment framework as specified in DFARS 252.240-7997. The work must be performed at Fort Bragg, North Carolina, with full responsibility for maintaining control effectiveness and readiness for audits or evaluations at any time. This is a subcontract under the Aviation Supply Chain ESOC Buys initiative, classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 27, 2026, with a response deadline of August 4, 2026, and no set-aside designation applies. The contractor must operate within the framework of federal defense cybersecurity mandates and demonstrate the ability to support DoD assessment reporting with precision and timeliness, ensuring continuous compliance throughout the performance period. All activities are tied directly to safeguarding covered defense information and meeting the DoD’s stringent information protection standards.