Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard controlled unclassified information within the information systems of the contractor. This includes establishing, documenting, and enforcing administrative, physical, and technical safeguards aligned with the NIST framework to ensure compliance with federal cybersecurity standards for handling sensitive but unclassified data. All subcontractors and personnel involved must adhere to these controls, and the contractor is accountable for continuous monitoring, assessment, and improvement of the cybersecurity posture throughout the contract period. In addition to control implementation, the contract mandates timely and accurate cyber incident reporting in accordance with NIST guidelines. Any suspected or confirmed security breaches, unauthorized access, or data loss involving controlled unclassified information must be reported immediately to the appropriate federal authorities. The place of performance is located at Cherry Point, North Carolina, and the work is classified as a subcontract under NAICS code 541512, with the Department of Defense through the Active Devices Division as the overseeing organization. Responses are due by July 9, 2026, and compliance with all regulatory and technical requirements is mandatory for award and continued performance.