Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard controlled unclassified information within contractor systems, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, is specifically tied to performance at Corpus Christi, Texas, with a zip code of 78419-5255, and falls under NAICS code 541512 for computer systems design services. Contractors must establish, document, and continuously monitor controls designed to protect CUI, including access management, audit logging, configuration management, and incident response procedures, all in alignment with the NIST framework. The solicitation deadline is August 17, 2026, with the posting date listed as August 5, 2026, indicating a short window for response. Although no set-aside information is provided, the contract is structured as a subcontract, suggesting it may be part of a larger prime contract effort requiring cybersecurity compliance as a downstream obligation. Contractors must be prepared to demonstrate full adherence to the 110 security controls outlined in NIST SP 800-171, and maintain audit-ready documentation throughout performance. Failure to implement or sustain these controls could result in non-compliance penalties, loss of access to CUI, or termination of contractual obligations.