Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in accordance with the Defense Federal Acquisition Regulation Supplement (DFARS) and the National Institute of Standards and Technology Special Publication 800-171. This subcontract focuses on ensuring full compliance with NIST SP 800-171 requirements, which include configuring systems to meet specific security controls related to access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, system and communications protection, and system and information integrity. The effort is scoped to support systems that process, store, or transmit CUI and mandates a thorough evaluation to validate the effectiveness of implemented controls. Performance is required at the designated location in Johnson City, Tennessee, with a ZIP code of 37615-3065, and the work falls under the NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. This subcontract is issued by the Defense Logistics Agency under the Department of Defense, with no set-aside designation specified. All work must be completed in alignment with federal cybersecurity mandates to ensure the integrity and confidentiality of CUI, and compliance must be demonstrable through documented evidence and assessment results.