NIST SP 800-171 Compliance Implementation & System Hardening

The contract requires the implementation and documentation of technical and administrative security controls aligned with NIST SP 800-171 Rev 1 to safeguard Controlled Unclassified Information across systems. Key responsibilities include system hardening to reduce attack surfaces, enforcing strict access controls, maintaining comprehensive audit logs, and promptly remediating identified vulnerabilities. All activities must be thoroughly documented to demonstrate compliance and readiness for assessment, ensuring the protection of sensitive data handled under Department of Defense requirements. This is a subcontract under the Aviation Supply Chain division with a performance location in San Diego, California, tied to NAICS code 541512 for computer systems design services. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. Contractors must be prepared to meet rigorous federal standards for CUI protection, with emphasis on operational readiness and verifiable control implementation across the entire system environment.