NIST SP 800-171 Cybersecurity Compliance and Incident Reporting

The contract requires the implementation and maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect covered defense information and ensure compliance with DFARS 252.204-7012. This includes establishing technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or compromise of sensitive information, as well as establishing procedures for timely detection, reporting, and mitigation of cyber incidents. The work is to be performed at Camp Pendleton, California, with a focus on meeting federal requirements for safeguarding controlled unclassified information within defense-related systems. This is a subcontract under the Department of Defense’s ASC Commodities Division, with a North American Industry Classification System code of 541512, indicating it involves computer systems design services. The solicitation was posted on August 2, 2026, and responses are due by August 10, 2026. The contract does not specify a set-aside type or point of contact, and all performance is expected to occur at the designated location. Successful bidders must demonstrate capability to fully comply with the cybersecurity standards and incident reporting obligations mandated by federal regulation.