Cybersecurity Compliance & NIST 800-171 Assessment Support

A small business subcontract is being solicited to provide third-party cybersecurity support for implementing, auditing, and documenting NIST SP 800-171 controls on information systems that handle Controlled Unclassified Information related to the CCA. The work is required to ensure full compliance with federal cybersecurity standards for the prime contractor’s systems, with deliverables focused on achieving and maintaining adherence to the outlined framework. Performance will be centered at NEW CUMBERLAND, PA, 17070-5002, and the effort is classified as a Total Small Business Set-Aside under SBA guidelines, ensuring only small businesses qualify to respond. The contract falls under NAICS code 541611 for Management Consulting Services, emphasizing advisory and implementation expertise in cybersecurity compliance. Proposals must be submitted by August 20, 2026, following the solicitation issued by the Department of Defense’s Active Devices Division, with all work aimed at securing CUI within the prime contractor’s environment through rigorous third-party validation and documentation.