Cybersecurity & NIST SP 800-171 Compliance Assessment

The contract requires the implementation and assessment of NIST SP 800-171 security controls across systems that handle Covered Defense Information, ensuring alignment with federal cybersecurity standards for protected data. This includes establishing robust access controls, defining user permissions, and enforcing technical and administrative safeguards to prevent unauthorized access or data breaches. All activities must comply with the requirements outlined in NIST SP 800-171, and the contractor is responsible for conducting a thorough assessment to validate control effectiveness, documenting findings, and addressing any deficiencies. Incident reporting is a critical component, requiring immediate notification and formal documentation of any security incidents involving Covered Defense Information, in accordance with specified timelines and reporting protocols. The work is to be performed at Cherry Point, North Carolina, under a subcontract vehicle with a NAICS code of 541512, indicating it relates to computer systems design services. The solicitation closed on July 29, 2026, and the work is overseen by the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, with performance focused on ensuring full compliance and readiness for audit or inspection.