Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and full documentation of cybersecurity controls aligned with NIST Special Publication 800-171 for systems that process, store, or transmit controlled unclassified information. The scope centers on achieving compliance with the specified framework to protect CUI, encompassing the configuration, testing, and recording of all required security measures across relevant information systems. This effort must result in a verifiable and audit-ready posture that demonstrates adherence to federal cybersecurity standards for handling sensitive but unclassified data. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside category, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. The solicitation was posted on July 28, 2026, with responses due by August 5, 2026, and is managed by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. The performance location and point of contact information are not specified, but work is expected to support DOD systems requiring NIST 800-171 compliance, with all deliverables focused on technical implementation and documentation rather than advisory or assessment-only services.