Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract supports the implementation of NIST SP 800-171 security controls to ensure proper safeguarding of covered defense information, requiring the contractor to conduct comprehensive self-assessments and coordinate activities necessary to prepare for Department of Defense audits. The work is focused on achieving and maintaining compliance with federal cybersecurity standards applicable to defense contractors handling sensitive information, with deliverables centered on documentation, control validation, and audit readiness. The effort is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses can bid, and it falls under NAICS code 541512 for computer systems design services. Performance is required at the DDSP New Cumberland Facility in Pennsylvania, with a submission deadline of July 6, 2026, and the opportunity was posted on June 24, 2026. All work must align with DoD requirements and be executed in support of the agency’s cybersecurity posture and supply chain integrity.