Cybersecurity Compliance (NIST SP 800-171) Assessment and Documentation

The contract requires comprehensive cybersecurity compliance services aimed at achieving alignment with NIST SP 800-171 and DFARS 252.204-7012 standards for the protection of controlled unclassified information. The work involves conducting a full assessment of existing security controls, identifying gaps, and developing detailed documentation to demonstrate adherence to federal cybersecurity requirements for defense subcontractors. The assessment must cover all applicable security controls outlined in NIST SP 800-171, including access control, audit and accountability, configuration management, incident response, and system and communications protection, ensuring that systems and processes handling controlled unclassified information meet the Department of Defense’s mandated safeguards. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a submission deadline of July 27, 2026, and the posting date of July 16, 2026. The solicitation is structured as a subcontract under NAICS code 541512, which corresponds to computer systems design services. The contracting entity is the Department of Defense, specifically under the Land Supply Chain organization, and the effort is intended to support the broader defense supply chain’s obligation to secure sensitive information. All deliverables must be meticulously documented and submitted in accordance with federal compliance protocols to validate continuous operational readiness and regulatory adherence.