Cybersecurity & CUI Compliance Support

The contract seeks a small business to provide comprehensive cybersecurity support aligned with NIST SP 800-171 requirements and compliance with DFARS 252.204-7012, ensuring the secure handling and protection of covered defense information. This includes conducting a formal assessment of the contractor’s information systems to validate adherence to the 110 security controls outlined in NIST SP 800-171, as well as establishing and maintaining ongoing compliance through continuous monitoring, documentation, and corrective actions. The scope further mandates the implementation of robust cyber incident reporting procedures in accordance with DFARS requirements, ensuring timely and accurate notification of any security breaches or suspected compromises involving covered defense information. All activities must be performed in alignment with the Small Business Administration’s Total Small Business Set-Aside guidelines, limiting eligibility to small business concerns as defined by the NAICS code 541512. The work is anticipated to support the Department of Defense’s Strategic Acquisition Program Directorate, with performance expected to occur wherever the contractor’s operations and systems are located, though no specific geographic location is designated. The solicitation closes on August 11, 2026, and the contractor will be required to demonstrate not only initial compliance readiness but also a sustainable, repeatable process for maintaining compliance over time, including the ability to respond to cyber incidents, retain required records, and facilitate audits or assessments as needed by the government.