Cybersecurity Compliance and Information Safeguarding

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring full compliance with DFARS requirements. The contractor must establish and sustain a robust system security plan, conduct regular assessments of control effectiveness, and promptly report any cyber incidents as mandated. All activities must align with the strict guidelines for safeguarding sensitive government data against unauthorized access, disclosure, or compromise. The contract is structured as a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA, with a NAICS code of 541612 indicating it falls under computer systems design services. It is issued by the Department of Defense’s Strategic Acquisition Program Directorate and is open for response until August 20, 2026, with the request posted on August 5, 2026. Performance of the work is expected to occur at an undefined location, and all deliverables must meet federal cybersecurity obligations without deviation.