NIST SP 800-171 Compliant IT Systems Support

The contract requires the provision or support of IT systems used for order management, delivery tracking, or invoicing functions that must comply with NIST Special Publication 800-171 due to the handling of covered defense information as mandated by DFARS 252.204-7012. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, and the work involves ensuring robust cybersecurity controls are implemented to protect sensitive data processed or stored within the systems. Compliance with these standards is non-negotiable and applies to all aspects of the IT infrastructure, including access controls, audit logging, data encryption, and system configuration management. The North American Industry Classification System code 518210 identifies this as information technology consulting services, indicating the nature of the support provided is technical and advisory in scope. The contract was posted on June 26, 2026, and performance is expected to occur in an unspecified location under the jurisdiction of the Defense Logistics Agency. The subcontractor must be prepared to demonstrate full adherence to NIST SP 800-171 requirements and maintain documentation to validate compliance at all times during contract execution. Failure to meet these requirements could result in termination or penalties, as the handling of covered defense information subjects the contractor to strict federal cybersecurity obligations.