Cybersecurity and NIST SP 800-171 Compliance Support

This contract solicits support for implementing and assessing cybersecurity controls to ensure compliance with DFARS requirements for systems handling controlled unclassified information. The work requires adherence to the standards outlined in NIST SP 800-171, focusing on the protection of CUI within information systems used by covered defense contractors. The effort involves evaluating current security postures, identifying gaps, and executing corrective actions to meet federal cybersecurity mandates, with deliverables centered on documentation, risk assessments, and validation of control effectiveness. The contract is structured as a subcontract and is set aside exclusively for Service-Disabled Veteran-Owned Small Businesses, underscoring the federal government’s commitment to supporting veteran-owned enterprises. It falls under NAICS code 541512 for Computer Systems Design Services, indicating the nature of the technical and advisory work required. Performance is expected to occur primarily in New Cumberland, Pennsylvania, with a specific deadline for responses set for July 27, 2026. The solicitation is issued under the Department of Defense through LAND SUPPLIER OPNS ENGINES, and all proposals must fully align with the cybersecurity frameworks and compliance timelines mandated for defense industry partners handling sensitive government information.