Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information within the designated environment. The scope centers on ensuring compliance with the full set of required controls to protect sensitive data and enable timely cyber incident reporting to the Defense Cyber Crime Center. This subcontract is part of a broader Department of Defense effort to enforce standardized cybersecurity practices across its supply chain, with specific performance obligations tied to the location at Cherry Point, North Carolina, 28533-5040. Compliance is non-negotiable and must be fully operational by the response deadline of August 3, 2026. The contract falls under NAICS code 541512 for computer systems design services and is classified as a subcontract under the ACTIVE DEVICES DIVISION. There is no set-aside designation indicated, and while no point of contact is listed, the solicitation is accessible through the DIBBS portal. The work involves continuous monitoring, documentation, and adaptation of security measures to meet evolving threat landscapes while maintaining auditable records to demonstrate adherence to NIST standards. Failure to meet these obligations may result in non-compliance consequences impacting eligibility for future DoD contracts.