Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls across systems that handle Controlled Unclassified Information, ensuring compliance with federal standards for protecting sensitive but unclassified data. The work is scoped as a subcontract under the Department of Defense, specifically for the MARITIME SUPPLY CHAIN ESOC BUYS division, with performance required at Fort Leonard Wood, Missouri, 65473-8947. The effort focuses on evaluating existing security postures, deploying necessary technical and administrative safeguards aligned with NIST 800-171, and documenting conformance through formal assessment processes. All work must be completed and submitted by the response deadline of August 17, 2026, following the release of the solicitation on August 4, 2026. The North American Industry Classification System code 541512 indicates this is for computer systems design and related services, emphasizing the technical and advisory nature of the task. There is no set-aside designation specified, meaning the opportunity is open to all qualified contractors without preference. The contract is managed through DLA’s DIBBS platform, and proposers must ensure full alignment with the required control families, including access control, audit and accountability, configuration management, and incident response, among others, to meet DoD compliance expectations.