IT Security and Safeguarding Compliance (NIST 800-171)

The contract requires the implementation and ongoing maintenance of robust security controls to safeguard contractor information systems handling federal data, specifically in alignment with FAR 52.204-21 and FAR 52.240-93, with compliance grounded in the NIST SP 800-171 framework. All systems processing, storing, or transmitting federal information must be secured through technical, administrative, and physical safeguards to ensure confidentiality, integrity, and availability, with continuous monitoring and remediation of vulnerabilities as part of operational responsibility. The work is classified as a subcontract under NAICS code 541512, and performance is expected to occur at Ashburn, Virginia, with a 20147 zip code. The solicitation was posted on July 10, 2026, with proposals due by July 15, 2026, and is managed by the Eastern Federal Lands Division within the Department of Transportation. While the agency has not specified a set-aside type, the contract emphasizes strict adherence to federal cybersecurity standards and demands proven experience in implementing NIST 800-171 controls, including documentation, training, incident response, and system authorization processes. Compliance is not optional and must be maintained throughout the contract lifecycle to protect sensitive federal data residing on or accessed by contractor systems.