Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract seeks third-party support to ensure compliance with NIST SP 800-171 requirements for systems handling controlled unclassified information. Services include conducting comprehensive gap assessments to identify deficiencies in current security controls, developing a detailed System Security Plan that outlines policies and procedures aligned with NIST standards, and preparing and submitting the necessary documentation to the Supplier Performance Risk System for official recording. The work is focused exclusively on achieving and documenting compliance, not implementing technical controls, and must be performed by a qualified contractor with proven expertise in federal cybersecurity frameworks. This subcontract is issued under the Defense Logistics Agency within the Department of Defense and is classified under NAICS code 541512 for computer systems design services. The opportunity was posted on July 20, 2026, with a strict response deadline of July 23, 2026. Performance location details are not specified, but the contractor will be expected to work closely with the agency to meet federal compliance timelines. All deliverables must be properly documented and submitted to satisfy DOD requirements, and the contractor is expected to have the technical capability to interpret and apply NIST guidance accurately without direct oversight on implementation.