Cybersecurity Compliance & Reporting (NIST SP 800-171)

This contract focuses on implementing and maintaining cybersecurity controls in accordance with NIST SP 800-171 standards, specifically for systems that handle Controlled Unclassified Information (CUI). Key responsibilities include the development of a System Security Plan (SSP) and the timely reporting of any cyber incidents. The contract is a subcontract opportunity issued by the Defense Health Agency under the Department of Defense, with performance required at Camp Lejeune. It falls under the NAICS code 541512, which relates to computer systems design services. The solicitation was posted on June 15, 2026, with a response deadline of July 15, 2026. Although some details such as the solicitation number, point of contact, and office address are not provided, the contract clearly aims to ensure cybersecurity compliance and effective incident management for DoD-related healthcare information systems. This work is critical to protecting sensitive data and maintaining adherence to federal cybersecurity requirements.