Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract provides support for achieving and maintaining NIST SP 800-171 compliance to safeguard covered defense information as required under DFARS 252.204-7012. The scope includes comprehensive system assessments to evaluate current security controls, development and refinement of required documentation to demonstrate compliance, and establishment of processes for timely cyber incident reporting. The work must be performed in accordance with federal cybersecurity standards to ensure the protection of sensitive defense data handled by subcontractors. All deliverables are tied to meeting Department of Defense requirements for information system security across contractor environments. The contract is classified as a subcontract under NAICS code 541512 and is managed by the Defense Logistics Agency within the Department of Defense. Performance is expected to occur in Phoenix, Arizona, with a response deadline of August 3, 2026, and the opportunity was posted on July 22, 2026. Participants must demonstrate capability in implementing NIST 800-171 controls, conducting gap analyses, and producing auditable records that validate compliance posture. The contractor will be responsible for aligning their cybersecurity framework with defense industrial base standards and ensuring ongoing adherence to incident reporting protocols under the DFARS regulation.