NIST SP 800-171 Compliance & Cybersecurity Reporting

The contract requires the assessment, implementation, and ongoing reporting of NIST SP 800-171 compliance for systems that handle Controlled Unclassified Information, ensuring all security controls are properly applied and documented to meet federal cybersecurity standards. This includes identifying gaps in current security practices, deploying necessary technical and procedural safeguards, and producing regular reports to demonstrate adherence to the framework, with an emphasis on maintaining continuous compliance throughout the contract period. The work is tied to systems located at Newport, Rhode Island, 02841-1703, and must be executed under the direction of the ASC Commodities Division within the Department of Defense. This is a subcontract under NAICS code 541512, focused on computer systems design services, with a response deadline of May 18, 2026, and a posting date of May 10, 2026. The agreement does not specify a set-aside type and does not identify a point of contact, but all work must align with the Department of Defense’s expectations for securing Controlled Unclassified Information. Compliance activities must be thorough, traceable, and verifiable, as failure to meet NIST SP 800-171 requirements could result in contract non-compliance, loss of access to sensitive data, or termination. Performance is expected to be completed in accordance with federal guidelines and reported in a format acceptable to the contracting authority.