NIST SP 800-171 Cybersecurity Compliance Support

The contract requires the implementation and thorough documentation of cybersecurity compliance with NIST SP 800-171 to protect Controlled Unclassified Information across all systems and processes. This includes developing a System Security Plan that addresses all 110 security controls outlined in the standard, ensuring configuration, access, audit, and incident response measures are properly documented and operational. The contractor must also adhere to FAR 52.240-93, which mandates specific contractual obligations related to the handling of CUI and the assurance of third-party compliance within the supply chain. All activities must be performed in alignment with Department of Defense requirements, with deliverables including comprehensive records, evidence of control implementation, and readiness for assessment or audit. This is a subcontract under the NAICS code 541512 for Cybersecurity Services, issued by the Department of Defense through LSO Combat Vehicles and Armament. The solicitation was posted on July 14, 2026, with a required response deadline of July 29, 2026. Performance of the work is expected to occur in support of defense-related systems, though no specific location is designated. The contractor must demonstrate proven capability in NIST 800-171 compliance, including experience with SSP development, CUI handling procedures, and federal acquisition regulation adherence, ensuring end-to-end alignment with national cybersecurity standards for defense contractors handling sensitive but unclassified information.