Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within contractor systems supporting the Department of Defense. Compliance must be achieved to ensure full readiness for official DoD assessments, meaning all 110 security requirements outlined in the NIST publication must be fully configured, documented, and operational. The contractor is responsible for establishing a robust cybersecurity posture that meets federal standards, including continuous monitoring, incident response capabilities, and policy enforcement tailored to protect CUI from unauthorized access, disclosure, or compromise. This is a subcontract under the NAICS code 541512, indicating the focus is on computer systems design services with a cybersecurity emphasis. The solicitation was posted on July 16, 2026, with a response deadline of July 31, 2026, and performance is expected to support the Active Devices Division of the Department of Defense. While specific location details are not provided, the work is tied to DoD operational needs and requires adherence to federal cybersecurity mandates without exemption. Successful compliance is non-negotiable for contract award and sustainment, and the contractor must demonstrate documented evidence of control implementation and assessment preparedness throughout the contract lifecycle.