Cybersecurity Compliance for Contractor Systems

This contract requires the implementation and assessment of NIST Special Publication 800-171 controls to ensure cybersecurity compliance for contractor systems that handle covered defense information. The work involves configuring, validating, and documenting security controls outlined in the NIST framework to meet federal requirements for protecting sensitive defense data, with a focus on achieving full compliance through continuous monitoring and formal assessment. Performance is expected to include all necessary technical and administrative measures to safeguard information systems, along with providing evidence of adherence to the specified standards. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside program, restricted exclusively to small business concerns, with the NAICS code 541512 indicating it pertains to computer systems design services. It is issued by the Strategic Acquisition Program Directorate within the Department of Defense, with bids due by August 19, 2026, following a posting date of August 4, 2026. The place of performance is unspecified, indicating work may be conducted remotely or at various contractor locations, provided systems meet the required security standards and can be reviewed or assessed as needed by the government.