Cybersecurity Compliance (NIST SP 800-171 Implementation)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information throughout the system environment. This includes conducting a thorough system assessment to identify gaps in current security posture, developing and executing a detailed plan of action and milestones to address deficiencies, and ensuring timely and accurate reporting of any cyber incidents in compliance with federal requirements. The work is focused on achieving and sustaining compliance with these standards to safeguard sensitive data handled under the Department of Defense contract. The subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Land Supply Chain organization within the Department of Defense. Performance is expected to occur in Phoenix, Arizona, with a response deadline of August 3, 2026, and the solicitation was posted on July 23, 2026. While no set-aside type is specified, the contract seeks qualified entities capable of delivering robust, auditable cybersecurity controls and maintaining continuous compliance in a defense-contracted environment.