Cybersecurity Compliance & Reporting

The contract requires performing a comprehensive cybersecurity assessment in alignment with NIST SP 800-171 standards to evaluate the implementation of security controls across systems handling controlled unclassified information. The scope includes detailed documentation of existing security measures, verification of compliance with required controls, and submission of assessment results through designated Department of Defense systems. Ongoing monitoring of the security posture is mandated to ensure continuous adherence to the standard, with real-time reporting of any security incidents or control failures. All activities must be conducted in accordance with DoD requirements and timelines, with full accountability and traceability of findings and remediation efforts. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The work is expected to be performed in support of federal cybersecurity mandates, with performance tied to the integrity and timeliness of reporting through official DoD channels. While no specific location is designated, the obligations are tied to the handling of defense-related information and require strict compliance with federal cybersecurity frameworks. The contract was posted in June 2026 and is administered through the DIBBS platform, indicating its integration into the broader defense contracting ecosystem.