Cybersecurity Compliance (NIST SP 800-171) Assessment & Implementation

The contract involves the implementation and assessment of NIST Special Publication 800-171 security controls to ensure compliance with DFARS clauses 252.204-7012 and 252.204-7020, which mandate the protection of covered defense information. The work focuses on aligning organizational cybersecurity practices with federal standards to safeguard sensitive unclassified information related to defense contracts, requiring a thorough evaluation of existing systems, identification of control gaps, and execution of necessary technical and administrative safeguards. This includes documenting control implementation, conducting internal assessments, and preparing for potential audits or third-party evaluations to validate compliance. This subcontract is associated with the Department of Defense, specifically under the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services. The solicitation was posted in June 2026 and is intended for performance by a subcontractor supporting broader DoD cybersecurity obligations. The place of performance and specific location details are not provided, indicating flexibility in execution locations, and the work is critical to maintaining the integrity and confidentiality of defense-related data handled by the contractor. The contractual obligations necessitate continuous monitoring, reporting, and adaptation of cybersecurity measures to meet evolving threat landscapes and regulatory expectations.