Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls across systems handling controlled unclassified information, ensuring full compliance with federal standards for protecting sensitive but unclassified data. This includes establishing appropriate technical, administrative, and physical safeguards, as well as ensuring that all subcontractors are contractually obligated to adhere to the same requirements through proper flow-down clauses and verification processes. The assessment must validate that controls are not only in place but also effectively operating within the environment to mitigate risks associated with CUI exposure. The work is designated as a subcontract under the Department of Defense, specifically administered by the ASC SUPPLIER OPER AE AND AF DIV, with performance required at the location in Starke, Florida, zip code 32091-9794. The North American Industry Classification System code is 541512, indicating this involves computer systems design and related services. The solicitation was posted on July 13, 2026, and responses are due by July 21, 2026. All parties must align with DOD expectations for cybersecurity posture, with a focus on continuous compliance and audit readiness throughout the contract lifecycle.