Defense-Related Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and assessment of cybersecurity controls for contractor information systems that process, store, or transmit Controlled Unclassified Information, in full compliance with DFARS 252.240-7997 and the National Institute of Standards and Technology Special Publication 800-171. The scope encompasses validating that all required security requirements are properly configured, documented, and maintained across the contractor’s information systems to protect CUI from unauthorized access, disclosure, or compromise. Assessment procedures will include internal reviews and external evaluations to confirm adherence to the 14 families of security controls outlined in NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, and incident response. The contract is structured as a subcontract under the Department of Defense, specifically for operations tied to LAND SUPPLIER OPNS ENGINES, with performance required at the location in Anniston, Alabama, zip code 36201-4199. It is governed under NAICS code 541512, indicating it relates to computer systems design services. Interested parties must submit responses by August 3, 2026, and the solicitation was posted on July 23, 2026. While no set-aside designation is specified, the requirement is mandatory for any entity seeking to handle CUI on behalf of the DoD and carries significant compliance obligations. Failure to meet these cybersecurity standards may result in contract termination or ineligibility for future DoD work.