Cybersecurity Compliance and NIST SP 800-171 Assessment Support

This contract supports compliance with NIST SP 800-171 and DFARS 252.240-7997 requirements focused on safeguarding controlled unclassified information within a defense supply chain environment. It requires the implementation of documented security controls, ongoing documentation of compliance activities, and formal assessment processes to ensure alignment with federal cybersecurity standards for CUI. The work will involve establishing, maintaining, and validating protective measures across systems and processes that handle sensitive government data, with an emphasis on operational readiness and auditability. The contract is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance required to occur in New Cumberland, Pennsylvania, ZIP 17070-5002. It falls under NAICS code 541512 for Computer Systems Design Services and was posted for solicitation on July 14, 2026, with responses due by July 22, 2026. Participation will necessitate proven experience in federal cybersecurity compliance, including the ability to conduct internal assessments, generate audit-ready documentation, and coordinate with government stakeholders to address findings and sustain continuous compliance.