Cybersecurity Compliance & NIST 800-171 Assessment Support

The contract seeks third-party assessment and advisory services to ensure compliance with NIST SP 800-171 and CMMC Level 2 requirements, focusing on system audits, Plan of Action and Milestones development, and preparedness for cyber incident reporting. The services are intended to support the ASC Commodities Division within the Department of Defense in achieving and maintaining robust cybersecurity postures aligned with federal standards, particularly for covered contractor information systems handling sensitive but unclassified data. The scope includes evaluating existing controls, identifying gaps, recommending remediation strategies, and validating implementation effectiveness to meet regulatory obligations. This subcontract is solicited under NAICS code 541512 for computer systems design services, with a response deadline of August 13, 2026, and a posting date of August 5, 2026. Performance is required at the location in Texarkana, Texas, with a ZIP code of 75507-5000. The contract does not specify a set-aside status, and while no point of contact details are provided, potential offerors must ensure complete alignment with the technical and compliance deliverables outlined in the solicitation through the DIBBS portal link. All work must be conducted in support of Department of Defense cybersecurity compliance objectives without deviation from the mandated standards.