Cybersecurity Compliance and Assessment Services

The contract requires the implementation and ongoing maintenance of security controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information within the Department of Defense environment. This includes establishing technical, administrative, and physical safeguards to meet federal requirements for protecting CUI, as well as preparing for and supporting Department of Defense cyber assessments to verify compliance. The contractor must ensure all systems and processes are configured to pass rigorous evaluation while maintaining continuous adherence to the standard throughout the contract term. In addition to compliance preparation, the contractor is responsible for establishing and executing cyber incident reporting procedures in accordance with DoD guidelines. This involves detecting, responding to, and documenting cybersecurity events affecting CUI, ensuring timely and accurate reporting to designated authorities. The work must be performed at the designated location in Cherry Point, North Carolina, with all activities aligned to the NAICS code 541611 for administrative management and general management consulting services. The subcontract is solicited under a deadline of May 18, 2026, and will support the ASC Commodity Division’s obligation to uphold DoD cybersecurity standards.