Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information (CUI) throughout manufacturing and procurement processes, ensuring compliance with federal cybersecurity standards for sensitive non-classified data. The work must be performed at the specified place of performance in Tracy, California, with a clear focus on aligning operational procedures, technical safeguards, and administrative policies with the 110 security requirements outlined in NIST SP 800-171. Documentation must be thorough, auditable, and demonstrate continuous adherence to the framework, covering areas such as access control, incident response, audit and accountability, and system and communications protection. This is a subcontract under the Department of Defense’s Maritime Supply Chain, with a NAICS code of 541512 indicating information technology services. The solicitation opened on May 8, 2026, and responses are due by May 13, 2026, indicating a short turnaround time for qualification and proposal submission. The contract does not specify any set-aside type, meaning it is open to all eligible contractors, and the emphasis is on demonstrated capability to meet stringent cybersecurity requirements for CUI handling. Successful bidders must be prepared to provide evidence of existing compliance measures or a detailed plan for achieving full NIST SP 800-171 alignment within the contract period.