NIST SP 800-171 Cybersecurity Compliance Implementation

The contract requires the implementation of NIST Special Publication 800-171 cybersecurity controls across systems that handle Controlled Unclassified Information, ensuring compliance with federal requirements for protecting sensitive but unclassified data. The scope includes the development of a System Security Plan that documents how security controls are applied, monitored, and maintained, as well as conducting a thorough self-assessment to evaluate the effectiveness of those controls and identify areas requiring remediation. All activities must align with the latest NIST guidelines and be performed in accordance with Department of Defense standards to safeguard CUI across the contractual environment. This subcontract falls under NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The work is expected to be carried out in support of federal information security mandates, with the contractor responsible for delivering documented evidence of compliance, including control mappings, assessment results, and mitigation plans for any deficiencies. The contract posting date is June 25, 2026, and performance location details are not specified, indicating potential flexibility in where the work is conducted as long as the security requirements are met. The primary objective is to achieve and maintain full NIST 800-171 compliance to ensure the integrity and confidentiality of CUI handled by the system.