Cybersecurity & Compliance Support for DFARS/NIST 800-171

The contract requires comprehensive cybersecurity and compliance support to ensure NIST SP 800-171 adherence for prime contractors and subcontractors handling controlled unclassified information. Services include conducting thorough system assessments to identify gaps in security controls, developing and maintaining Plans of Action and Milestones to address deficiencies, and preparing organizations for effective cyber incident reporting in alignment with federal requirements. The effort is focused on enabling organizations to meet DFARS contractual obligations related to the protection of sensitive data and maintaining continuous compliance. This is a total small business set-aside under SBA guidelines, classified under NAICS code 541512 for computer systems design services, and is issued by the Department of Defense’s Strategic Acquisition Program Directorate. The solicitation is open for responses until August 18, 2026, with performance expected to support defense-related contractors across locations where controlled unclassified information is processed or stored. The scope emphasizes readiness for incident reporting, ensuring timely and accurate communication with federal authorities during cybersecurity events.