Cybersecurity Compliance & NIST SP 800-171 Assessment

This contract requires the implementation and assessment of cybersecurity controls outlined in NIST SP 800-171 for systems that process, store, or transmit covered defense information. The work must ensure full compliance with the framework’s requirements, including the proper configuration and documentation of all 110 security controls to safeguard sensitive data. Audit readiness is a core objective, meaning the contractor must maintain comprehensive evidence of control implementation and operational effectiveness to pass federal assessments. Additionally, the contractor is responsible for establishing and executing incident reporting procedures in alignment with federal mandates, ensuring timely notification and response to any cyber incidents affecting covered information. The contract is designated as a subcontract under the Department of Defense, with performance located in San Diego, California, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on July 27, 2026, and responses are due by August 7, 2026. All work must be completed in accordance with DoD standards and is subject to verification through official compliance evaluations. The contractor must demonstrate proven experience in NIST SP 800-171 implementation, possess the technical capability to conduct thorough assessments, and maintain secure, auditable records throughout the lifecycle of the project.