NIST SP 800-171 Safeguarding Compliance (IT Security)

The contract requires the implementation and documentation of security controls outlined in NIST Special Publication 800-171 to protect covered defense information within contractor systems, ensuring compliance with federal cybersecurity standards for handling sensitive DoD data. This is a small business set-aside subcontract under NAICS code 541512 for Computer Systems Design Services, intended exclusively for small businesses as defined by the SBA, and is issued by the Department of Defense under LSO Combat Vehicles and Armament. The solicitation was posted on July 16, 2026, with responses due by July 31, 2026, and performance is expected to support DoD requirements without a specified location. Compliance must address all 110 security controls detailed in NIST SP 800-171, covering areas such as access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, security assessment, system and communications protection, and system and information integrity. Documentation must demonstrate full adherence to the framework to ensure the confidentiality and integrity of covered defense information across all contractor systems.