Cybersecurity Compliance (NIST SP 800-171) Assessment and Reporting

The contract requires support for implementing and assessing NIST SP 800-171 security controls to ensure compliance with DFARS 252.204-7012 regulations for protecting Controlled Unclassified Information. This includes conducting a thorough evaluation of existing security practices, identifying gaps, and executing necessary remediation efforts to meet federal cybersecurity standards. A critical component of the effort is the accurate submission of assessment results to the Supplier Performance Risk System, ensuring transparent and official documentation of compliance status. The work is scoped as a subcontract under the Department of Defense, specifically tied to the Strategic Acquisition Program Directorate, with performance expected to align with the regulatory timeline and technical requirements set forth for CUI protection. The solicitation was posted on July 16, 2026, with responses due by July 31, 2026, indicating a limited window for proposal submission. The NAICS code 541512 identifies the work as computer systems design and related services, emphasizing the technical and advisory nature of the tasks involved. No specific location is designated for performance, suggesting the work may be conducted remotely or at various contractor facilities as long as compliance obligations are met. The absence of a set-aside classification indicates the opportunity is open to all eligible subcontractors without restrictions based on business size or category. Successful performers must demonstrate expertise in NIST frameworks, DFARS compliance, and the SPRS submission process to fulfill contractual obligations effectively.