Cybersecurity Compliance and Reporting (NIST SP 800-171 Implementation)

The contract mandates the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 for systems that process, store, or transmit Controlled Unclassified Information. The work requires full compliance with all applicable security requirements, including conducting regular self-assessments to verify control effectiveness and promptly reporting any cybersecurity incidents in accordance with federal guidelines. This effort is critical to ensuring the protection of sensitive government data and maintaining the integrity of the information systems involved. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 26, 2026, with a response deadline of August 10, 2026, and is managed by the Department of Defense’s Strategic Acquisition Program Directorate. Performance is expected to occur at an unspecified location, and participation is limited to qualified small businesses meeting the set-aside criteria. The contract emphasizes continuous compliance, accountability, and readiness to respond to security threats through structured reporting and assessment practices.