Cybersecurity Compliance (NIST SP 800-171)

The contract requires comprehensive implementation and assessment of NIST SP 800-171 standards to protect covered defense information, with a focus on developing a detailed system security plan and executing all required security controls. Compliance must be thoroughly documented and validated to meet federal cybersecurity requirements for handling sensitive defense data. The deliverables center on aligning information systems with the NIST framework, ensuring robust safeguards are in place and operable across the contractor’s environment. Performance is to be conducted at the specified location in Tracy, California, with a tight response deadline of July 20, 2026, following the posting date of July 9, 2026. This is a subcontract under the Department of Defense, classified under NAICS code 541512 for computer systems design services. The contracting activity is managed by the Active Devices Division, and all work must demonstrate strict adherence to NIST guidelines without deviation, including continuous monitoring and documentation to maintain compliance throughout the contract lifecycle.