Cybersecurity Compliance and CUI Protection (NIST SP 800-171)

This contract requires the implementation and assessment of cybersecurity controls to safeguard Covered Defense Information in alignment with DFARS regulations and NIST SP 800-171 standards, ensuring the protection of controlled unclassified information across all systems and processes. The scope includes conducting a thorough evaluation of existing security measures, applying required technical and administrative controls, and establishing robust incident reporting procedures to meet federal compliance obligations. The subcontractor must demonstrate full adherence to NIST SP 800-171 requirements and maintain documentation to support audits and continuous compliance monitoring. The opportunity is a total small business set-aside under SBA guidelines, designated for small businesses qualified under NAICS code 541512, which pertains to computer systems design services. Performance is expected to occur primarily in Texarkana, Texas, with a response deadline of August 3, 2026, and the solicitation was posted on July 23, 2026. The contracting office falls under the Department of Defense, specifically LSO Combat Vehicles and Armament, and all parties must operate under the strict cybersecurity and reporting frameworks defined by federal defense standards without exception.