Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and documentation of cybersecurity controls to protect controlled unclassified information (CUI) across systems governed by NIST SP 800-171 and DFARS 252.240-7997, ensuring full compliance with federal cybersecurity standards. The work involves configuring, assessing, and validating technical and administrative safeguards to meet the mandatory requirements for handling CUI, with thorough documentation to demonstrate adherence throughout the system lifecycle. The subcontract is targeted toward organizations capable of delivering actionable cybersecurity frameworks aligned with national defense protocols, emphasizing audit readiness and continuous compliance monitoring. The contract is issued under the Maritime Supply Chain division of the Department of Defense, with performance required at a location in Tracy, California, 95304-5000. It is classified as a subcontract under NAICS code 541512, which pertains to computer systems design services. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026. The absence of a set-aside designation indicates the opportunity is open to all qualified vendors, with no specific preferences for small businesses or other categories. Performance hinges on strict adherence to NIST and DFARS requirements, with failure to implement and document controls potentially resulting in non-compliance and contract termination.