NIST SP 800-171 Cybersecurity Compliance and CUI Protection

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in strict adherence to NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement requirements. This subcontract is specifically set aside for Service-Disabled Veteran-Owned Small Businesses and falls under NAICS code 541512 for computer systems design services. The work is performance-based at Hill Air Force Base, Utah, with a firm deadline for responses on August 13, 2026, following a posting date of August 5, 2026. The contractor must ensure all systems housing or processing CDI meet the full suite of security controls outlined in NIST SP 800-171, including access control, audit, configuration management, and incident response, while maintaining continuous compliance throughout the life of the agreement. All activities must align with Department of Defense standards to protect Controlled Unclassified Information and support national security objectives.