Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information within the context of Department of Defense subcontracting obligations under DFARS clauses. The work centers on ensuring that all required security measures are properly integrated into systems handling CUI, with a formal evaluation to verify compliance with the standard’s 110 controls across families such as access control, awareness and training, audit and accountability, and configuration management. The recipient must demonstrate ability to securely manage, store, and transmit CUI in alignment with federal cybersecurity requirements, and must be prepared to undergo audits to validate ongoing adherence. This subcontract is tied to a performance location in Tracy, California, with a zip code of 95304-5000, and falls under NAICS code 541512 for computer systems design services. The solicitation is issued by the Land Supplier Operations Vehicle Support organization under the Department of Defense, indicating the work supports defense-related logistics or vehicle support systems. The response deadline is July 27, 2026, and the contract is solicited through the DIBBS platform, suggesting submission and management will occur via standardized federal contracting procedures. The requirement carries significant compliance and operational consequences, as failure to meet NIST SP 800-171 standards could result in contract termination or debarment from future DoD work.