Cybersecurity Compliance (NIST SP 800-171 Implementation)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect controlled unclassified information within the contractor’s systems and processes. The work involves ensuring full compliance with the framework’s requirements for safeguarding CUI, including access controls, audit and accountability measures, configuration management, and personnel security practices. Additionally, the contractor must establish and sustain procedures for timely cyber incident reporting in accordance with federal guidelines, ensuring rapid detection, response, and notification of any security breaches or anomalies affecting CUI. The contract is structured as a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA, with the NAICS code 541512 for computer systems design services. Performance is expected to occur in Texarkana, Texas, with a response deadline of August 3, 2026, and a posting date of July 23, 2026. The acquiring entity is the Department of Defense under LSO Combat Vehicles and Armament, indicating the scope is tied to defense-related systems and information. Compliance with these requirements is critical to maintaining eligibility for federal contracts and protecting sensitive defense data.