Cybersecurity Compliance (NIST SP 800-171 Implementation)

The contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within the contractor’s systems and operations. Compliance with these controls is mandatory and must be sustained throughout the contract period to ensure the confidentiality, integrity, and availability of CUI. In addition to implementing the controls, the contractor must conduct a self-assessment of their cybersecurity posture against the NIST SP 800-171 requirements and submit the resulting assessment report as part of their compliance obligation. The contractor is also required to report any cyber incidents affecting CUI in accordance with DFARS clause 252.204-7012, including timely notification and remediation efforts as stipulated by the regulation. This subcontract is issued under the Department of Defense, specifically by DLA Dist San Joaquin, with the place of performance located in Tracy, California, zip code 95304-5000. The NAICS code 541512 indicates the work falls under computer systems design and related services, suggesting the scope involves technical implementation and ongoing IT security support. The solicitation was posted on May 8, 2026, with a response deadline of May 13, 2026, indicating a tight turnaround for potential bidders to submit proposals. The contract is not subject to a specific set-aside designation, and all interested parties must meet the cybersecurity compliance requirements outlined to be eligible for award.