Cybersecurity Compliance and Reporting (NIST SP 800-171 Implementation)

The contract involves the implementation of NIST SP 800-171 cybersecurity controls to ensure safeguarding of controlled unclassified information within systems handling Department of Defense data. This includes comprehensive system assessments to identify gaps in current security postures, development of a System Security Plan to document control implementation and organizational policies, and creation of a Plan of Action and Milestones to address identified weaknesses with clear timelines and remediation strategies. Ongoing cyber incident reporting is required to meet federal standards, ensuring timely notification and response to any security breaches or anomalies. The work is being performed under a subcontract tied to the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating information technology services and related cybersecurity consulting activities. The contract was posted in July 2026 and carries no set-aside designation, indicating eligibility for open competition among qualified subcontractors.