Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of all NIST SP 800-171 cybersecurity controls to protect covered defense information within the contractor’s systems and environments. This involves aligning technical, administrative, and physical security practices with the specified framework to ensure compliance with federal standards for safeguarding sensitive data. The effort must result in a complete and accurate self-assessment report submitted according to required protocols, demonstrating adherence to each control and addressing any gaps or deficiencies with remediation plans. This is a subcontract under the Department of Defense, with performance expected to occur at FPO, 96643, and falls under the NAICS code 541512 for computer systems design services. Responses are due by August 10, 2026, with the solicitation posted on July 28, 2026. The work focuses exclusively on achieving and validating NIST 800-171 compliance, with no additional set-aside provisions designated. All activities must be documented to support audit readiness and reporting requirements established by the Defense Industrial Base.