Cybersecurity & CUI Compliance Support (NIST SP 800-171)

The contract requires support for achieving and maintaining NIST SP 800-171 compliance for the handling of Controlled Unclassified Information, with responsibilities encompassing comprehensive assessment of current cybersecurity practices, implementation of required safeguards, and timely reporting of security incidents. The work is focused on ensuring that all systems and processes meet federal standards for protecting CUI within a Department of Defense environment, specifically under DLA Energy. The effort demands a detailed understanding of NIST controls aligned with the 14 families of security requirements and the ability to document, validate, and sustain compliance through regular audits and continuous monitoring. This subcontract is designated as a Partial Small Business Set-Aside under FAR 19.5, specifically targeting organizations classified under NAICS code 541512 for Computer Systems Design Services. Performance of the contract is centered at Fort Belvoir, Virginia, with a response deadline of August 3, 2026, and the opportunity was posted on July 1, 2026. The successful contractor must demonstrate proven experience in federal cybersecurity compliance, possess the technical capability to deploy and manage CUI protection measures, and be prepared to operate within the strict reporting and documentation requirements of the DoD. The position does not specify a point of contact, and all inquiries should follow the official SAM.gov portal link provided.