Cybersecurity Compliance (NIST SP 800-171) Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure full compliance with DFARS 252.204-7012 regarding cyber incident reporting. This includes establishing, monitoring, and auditing technical and administrative safeguards aligned with the NIST framework to protect sensitive government data stored, processed, or transmitted by the contractor. The contractor must be prepared to detect, report, and respond to cybersecurity incidents in accordance with federal requirements, with timely communication of breaches or potential compromises. This is a small business set-aside subcontract under NAICS code 541512, awarded by the Department of Defense through the Puget Sound office, with performance expected in Bremerton, Washington, 98314-6001. The solicitation was posted on July 19, 2026, and responses are due by July 30, 2026. Only small businesses qualifying under the SBA’s Total Small Business Set-Aside category are eligible to respond. The contractor will be expected to demonstrate proven capabilities in federal cybersecurity compliance, particularly in environments handling controlled unclassified information, and ensure continuous adherence to the specified regulatory and technical standards throughout the contract lifecycle.