Cybersecurity Compliance and Assessment

The contract mandates the implementation, assessment, and ongoing maintenance of NIST SP 800-171 security controls for systems that handle controlled unclassified information, ensuring alignment with federal cybersecurity requirements. All efforts must support compliance with DFARS cyber incident reporting obligations, requiring timely detection, documentation, and escalation of any security events involving CUI. The work is scoped as a subcontract under a Total Small Business Set-Aside, exclusively available to small business concerns as defined by the SBA, and falls under NAICS code 541512 for computer systems design services. The project is sponsored by the Department of Defense through LSO Combat Vehicles and Armament, with performance expected to support defense-related systems requiring stringent information protection standards. Responsive proposals must be submitted by August 17, 2026, following the solicitation released on August 2, 2026. Execution will occur within the broader DOD infrastructure, though specific locations are not designated, and all activities must be performed by a small business entity to meet set-aside criteria. The contractor is responsible for delivering a fully compliant and auditable security posture, with continuous monitoring and reporting mechanisms integrated into operational workflows.