Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the implementation and evaluation of cybersecurity controls to ensure compliance with NIST SP 800-171 standards for safeguarding Covered Defense Information as mandated by DFARS regulations. This subcontract involves establishing, testing, and validating technical and procedural safeguards across information systems to meet federal requirements for protecting sensitive defense data. The work is to be performed at a location in Philadelphia with a zip code of 19112-1403 and is classified under NAICS code 541611, indicating it relates to management consulting services, specifically in the cybersecurity and compliance domain. Respondents must submit proposals by July 6, 2026, with the solicitation posted on June 25, 2026. The contracting activity is under the Department of Defense, specifically the Electrical Devices Division, and the effort is focused on ensuring robust defense information protection through structured assessment and remediation of security controls. No set-aside provisions are specified, and the subcontract is open to eligible parties capable of delivering full-spectrum NIST 800-171 compliance services, including gap analysis, control implementation, documentation, and ongoing assessment reports. All work must align precisely with federal cybersecurity frameworks and be conducted in a manner that supports audit readiness and continuous compliance.