Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the contractor’s systems, ensuring alignment with Department of Defense cybersecurity standards. The scope includes developing a comprehensive System Security Plan that documents how each required control is addressed, along with all necessary supporting policies and procedures to meet compliance obligations. The contractor must establish a robust cybersecurity posture that enables successful preparation for and passage of a DoD assessment, demonstrating full adherence to the NIST framework and readiness for audit or evaluation. The performance location is tied to Kings Bay, Georgia with a zip code of 31547-2631, indicating the operational context for the secured systems and data. This is a subcontract under a Department of Defense procurement with a NAICS code of 541512, placing it in the realm of computer systems design services. The solicitation was posted on July 13, 2026, and responses are due by July 21, 2026, leaving a tight timeline for qualified parties to submit proposals. The focus is entirely on achieving and documenting compliance with federal cybersecurity requirements for CUI protection, with no indication of set-aside status or additional award preferences.