Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract seeks a subcontractor to implement, assess, and document compliance with NIST Special Publication 800-171 controls to safeguard covered defense information. This includes the development of a System Security Plan and a Plan of Action and Milestones to identify, prioritize, and remediate security gaps in alignment with federal cybersecurity requirements for defense contractors. The work must ensure full adherence to NIST SP 800-171 standards, covering all required controls related to access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security awareness, system and communications protection, and system and information integrity. The contract is classified as a subcontract under NAICS code 541512 and is managed by the Department of Defense’s Strategic Acquisition Program Directorate. Proposals must be submitted by August 3, 2026, following a posting date of July 19, 2026. The place of performance is not specified, and no set-aside status is indicated, meaning the opportunity is open to all qualified small and large businesses. The successful submitter will be responsible for delivering comprehensive documentation and assessments that validate compliance with the NIST framework, ensuring the defense information environment meets required security benchmarks.