Cybersecurity Compliance (NIST SP 800-171) Assessment & Reporting

This contract requires the implementation, assessment, and documentation of cybersecurity controls outlined in NIST SP 800-171 for systems handling covered defense information, with the goal of achieving compliance and submitting official assessment scores to the Department of Defense. The work involves evaluating existing security measures, identifying gaps, applying necessary controls, and producing complete documentation to demonstrate adherence to the standard, ensuring the system meets DoD requirements for protecting sensitive data. All deliverables must align with the NIST framework and be submitted through the appropriate DoD assessment channels. The contract is structured as a small business set-aside under SBA regulations, exclusively available to total small businesses, and is classified under NAICS code 541512 for computer systems design services. It was posted on July 23, 2026, with a response deadline of August 7, 2026, and falls under the Land Supply Chain organization within the Department of Defense. The place of performance and point of contact details are not specified, but the work is expected to be performed remotely or on-site as required by the system environment, with all assessments and submissions processed through the official DIBBS portal linked in the solicitation.