Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across systems that handle Controlled Unclassified Information, ensuring all applicable requirements are met to protect sensitive data. This includes developing and updating System Security Plans to document control implementation, conducting regular compliance assessments, and addressing any gaps or deficiencies to maintain continuous adherence to federal cybersecurity standards. The scope focuses on sustaining a compliant environment aligned with Department of Defense mandates, with performance expected at JBSA FT SAM HOUSTON. This is a subcontract under the NAICS code 541512 for computer systems design services, issued by the ASC COMMODITIES DIVISION under the Department of Defense, with a response deadline of May 21, 2026. The work must be performed at the specified location and is governed by the need for strict compliance with NIST guidelines to safeguard CUI. Failure to meet the requirements may result in non-compliance penalties and loss of contract eligibility. The solicitation is open for submissions through the DIBBS platform, and bidders must demonstrate proven experience in NIST 800-171 implementation, assessment, and documentation within defense or federal environments.