Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of the cybersecurity controls outlined in NIST SP 800-171 to safeguard covered defense information, ensuring that all applicable requirements are met to protect sensitive data handled under the agreement. A critical obligation includes reporting any cyber incidents to the appropriate authorities within 72 hours of discovery, emphasizing rapid response and transparency in the event of a breach or compromise. This subcontract is designated as a total small business set-aside under the Small Business Administration guidelines, limiting eligibility to qualified small businesses and promoting small business participation in Defense Department cybersecurity initiatives. The North American Industry Classification System code 541512 identifies the scope as computer systems design and related services, indicating the work involves technical implementation and support of cybersecurity frameworks rather than general IT operations. The contracting activity is under the Department of Defense through the Land Supply Chain office, and the performance location remains unspecified but is expected to align with the contractor’s authorized operating environment. The solicitation was posted on August 4, 2026, with a response deadline of August 19, 2026, providing a two-week window for interested small businesses to submit proposals through the DIBBS platform.