Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and assessment of NIST SP 800-171 security controls to protect controlled unclassified information within the contractor’s systems. Compliance must be demonstrated through a formal self-attestation process in alignment with DFARS 252.240-7997, ensuring all required controls are properly documented, tested, and maintained. Additionally, the contractor must establish and maintain robust procedures for cyber incident reporting as mandated by DFARS 252.204-7012, including timely notification of any security breaches or suspicious activities affecting covered defense information. The work is scoped to occur at the designated performance location in Lincoln, Nebraska, with a strict response deadline of August 17, 2026, and is classified as a subcontract under NAICS code 541512. The solicitation is administered by the ASC Commodities Division under the Department of Defense, with no specific set-aside status designated.