Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the implementation, assessment, and ongoing maintenance of NIST SP 800-171 security controls for systems handling Covered Defense Information, ensuring full alignment with DFARS 252.204-7012 requirements. This includes establishing robust cybersecurity practices to protect sensitive data, conducting regular compliance evaluations, and promptly reporting any cybersecurity incidents in accordance with federal guidelines. The scope is focused on achieving and sustaining a compliant posture throughout the contract lifecycle, with emphasis on continuous monitoring and improvement of security controls. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside program, targeting organizations classified as small businesses per FAR 19.5. The North American Industry Classification System code is 541512, indicating services related to computer systems design and related activities. The contract is issued by the Department of Defense’s Strategic Acquisition Program Directorate, with the response deadline set for August 18, 2026, and the solicitation posted on August 3, 2026. Performance location and point of contact details are not provided, but all work must be conducted in compliance with federal cybersecurity standards and reporting obligations tied to defense information systems.