Cybersecurity Compliance (NIST SP 800-171) Implementation

The contract requires the implementation and documentation of all NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information (CUI) within contractor systems, aligning with Department of Defense cybersecurity standards. This subcontract mandates full compliance with the specified framework to secure sensitive data handled by the contractor, including the development of comprehensive policies, procedures, and technical safeguards that meet every requirement outlined in NIST SP 800-171. Documentation must be thorough and auditable, demonstrating how each control is applied, monitored, and maintained across all systems supporting the contract. Performance is to be executed at the designated location in Tracy, California, with a zip code of 95304-5000, under the oversight of the DLA Dist San Joaquin office, a component of the Department of Defense. The solicitation is classified as a subcontract with a North American Industry Classification System code of 541512, indicating it relates to computer systems design services. Interested parties must submit responses by August 7, 2026, following the posting date of July 27, 2026, and the submission must be made through the DIBBS portal using the provided RFQ link. The contract does not specify a set-aside classification and does not include a designated point of contact, requiring proposers to rely on the official solicitation channel for all inquiries and submissions.