Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires full implementation and annual self-assessment of cybersecurity controls to protect covered defense information in accordance with DFARS 252.204-7012 and NIST SP 800-171 standards. This subcontract is designated as a Small Business Set Aside under SBA guidelines, ensuring eligibility and participation by small businesses primarily engaged in computer systems design services as classified under NAICS code 541512. The work involves deploying compliant security measures across all relevant systems and processes, conducting documented annual assessments to validate ongoing compliance, and maintaining evidence of control effectiveness to meet Department of Defense requirements. The place of performance is located in 20762, and the solicitation is open for responses until August 18, 2026, with an initial posting date of August 5, 2026. The contracting activity falls under the Department of Defense, specifically identified by the agency designation FA2860 316 Cons Pk, and the opportunity is accessible via the SAM.gov platform.