Cybersecurity Compliance – NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in full compliance with NIST SP 800-171 standards, as mandated by DFARS 252.240-7997. This subcontract is positioned within the Department of Defense's Maritime Supply Chain initiative, with performance specifically tied to the location of Tracy, California, 95304-5000. The work involves establishing a robust cybersecurity framework that meets all NIST 800-171 requirements, including access control, audit and accountability, configuration management, identification and authentication, and incident response, among others, to ensure the confidentiality, integrity, and availability of sensitive defense data handled by the contractor. This solicitation is open for responses through August 10, 2026, and is classified under NAICS code 541512 for Computer Systems Design Services. While no set-aside designation is specified, the contract is structured as a subcontract likely supporting a larger prime effort within the defense supply chain. The focus is strictly on technical cybersecurity implementation and continuous compliance, not on product procurement or general IT services. The contractor must be prepared to demonstrate operational adherence to NIST controls through documentation, assessment, and potential audit readiness, with all activities centered on protecting information critical to national defense operations in the maritime domain.