Cybersecurity and IT Resource Protection

The contract titled Cybersecurity and IT Resource Protection is a subcontract under a Total Small Business Set-Aside, aimed at implementing robust cybersecurity controls for IT systems utilized in research and development activities. The work must align with NASA’s cybersecurity policies for unclassified systems, specifically requiring full compliance with NIST Special Publication 800-171 and the Cybersecurity Maturity Model Certification (CMMC) Level 2 framework. This includes the deployment, validation, and ongoing maintenance of security measures to protect controlled unclassified information and ensure the integrity, confidentiality, and availability of systems and data throughout the R&D lifecycle. The subcontractor is expected to have the expertise to assess existing IT infrastructure, identify gaps, and execute remediation plans in accordance with federal standards without reliance on classified systems or protocols. The opportunity is open to small businesses as defined by the Small Business Administration, with a NAICS code of 541512 indicating it falls under Custom Computer Programming Services. The solicitation was posted on June 24, 2026, with proposals due by August 19, 2026, at 9:00 PM Eastern Time. Performance will be conducted at locations designated by NASA, though specific geographic details are not provided. The contract emphasizes compliance over customization, meaning the selected party must demonstrate proven ability to meet stringent federal cybersecurity requirements, not merely offer technological solutions. Although no point of contact or physical office address is listed, the submission and management of the opportunity will be handled through the SAM.gov platform using the provided UI link.