Cybersecurity Compliance and NIST 800-171 Assessment Support

The contract requires the implementation and documentation of NIST SP 800-171 security controls for information systems that handle Covered Defense Information, ensuring compliance with Department of Defense cybersecurity requirements. This includes supporting or conducting a self-assessment to validate that all required controls are properly configured, operational, and documented, with the potential to assist in a formal DoD assessment process. The work is scope-bound to systems processing CDI and demands thorough adherence to the NIST framework to meet federal standards for protecting sensitive defense data. This subcontract is issued under NAICS code 541512 for computer systems design services, with performance expected at APO 09321. The solicitation was posted on July 26, 2026, and responses are due by August 3, 2026. The contracting organization is the Aviation Supply Chain ESOC Buys under the Department of Defense, indicating this effort supports defense supply chain security initiatives. While no set-aside type or point of contact is specified, successful performers must demonstrate expertise in NIST 800-171 implementation and the ability to produce accurate, audit-ready documentation aligned with DoD expectations.