Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 self-assessment to evaluate compliance with federal cybersecurity requirements for protecting controlled unclassified information. The successful bidder must implement all necessary security controls outlined in NIST SP 800-171, ensuring that systems and processes meet the baseline standards for safeguarding sensitive data. This includes documenting control implementation, addressing gaps, and maintaining ongoing compliance with the framework as mandated by the Department of Defense. In addition to assessment and implementation, the contractor is responsible for supporting cyber incident reporting in accordance with DFARS guidelines, ensuring timely and accurate notifications of any security breaches or anomalies affecting covered systems. The work is to be performed at the designated location in Jacksonville, Florida, with a response deadline of August 6, 2026, under a subcontract arrangement linked to the NAICS code 541512 for computer systems design services. The effort is part of a broader DOD initiative to enforce cybersecurity standards across its supply chain, and the contractor must be prepared to demonstrate full adherence to all relevant regulatory and operational requirements.