Top

Cybersecurity Compliance (NIST SP 800-171 Assessment & SPRS Reporting)

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → Defense Logistics AgencyView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 1

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → Defense Logistics Agency

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Defense Logistics Agency

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Conduct NIST SP 800-171 assessments for systems handling CUI, achieve minimum score of 110, and submit results to SPRS.

Similar Contracts

Same NAICS industry code

NAICS: 541612

New

SLED

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider to deliver its Employee Assistance Program as part of its Total Rewards Package, designed to support employees and their families through confidential, 24/7 assessment, referral, and intervention services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, accessible both online and via phone. These services aim to enhance employee wellbeing, promote engagement, and reinforce the Port’s broader mission under its Century Agenda to become a highly effective public agency by retaining and attracting talented individuals essential to its operations. The solicitation, posted on July 31, 2026, is classified under NAICS code 541612 and is managed by the Port’s Human Resources department. Primary contact for the opportunity is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager, and all communications should be directed through their provided contact information. The program is not tied to a specific solicitation number and remains in forecast status, indicating an upcoming procurement process to secure a qualified vendor capable of delivering high-quality, scalable EAP services aligned with the Port’s commitment to workforce support and organizational effectiveness.

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance AssessmentThe contract requires a comprehensive assessment of information systems to ensure compliance with NIST SP 800-171 standards for safeguarding covered defense information as stipulated by DFARS regulations. The work involves evaluating technical and procedural controls within information systems to confirm adherence to the specified cybersecurity framework, with the goal of protecting sensitive data associated with Department of Defense contracts. The assessment must be thorough, documenting findings and identifying gaps in current security practices against the required NIST controls. This subcontract is issued under the NAICS code 541612 and is performance-based, with the place of performance located in Cherry Point, North Carolina, 28533-5040. The solicitation was posted on August 2, 2026, and responses are due by August 13, 2026. The contract is managed through the Department of Defense, specifically under the LAND SUPPLIER OPNS ENGINES organization, and must be executed by a qualified vendor capable of delivering a detailed, audit-ready evaluation of cybersecurity postures aligned with federal defense requirements. All deliverables must meet strict compliance thresholds to ensure the integrity, confidentiality, and availability of covered defense information.

LAND SUPPLIER OPNS ENGINES

POSTED

DEADLINE

Cybersecurity and CUI Compliance SupportThis contract requires ongoing adherence to DFARS 252.204-7012, mandating full implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information across all systems and processes. The scope includes establishing, maintaining, and continuously monitoring cybersecurity measures to protect CUI from unauthorized access, disclosure, or compromise, along with timely reporting of any cyber incidents as defined by the regulation. All activities must align with Department of Defense requirements and are performed under a subcontract arrangement, with compliance obligations extending to the entire lifecycle of CUI handling. The work supports the Defense Logistics Agency and is governed by NAICS code 541612, indicating specialized information technology services geared toward cybersecurity and regulatory compliance.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity & Compliance SupportThe contract titled Cybersecurity & Compliance Support requires the successful bidder to ensure the debt collection system meets stringent cybersecurity standards, data privacy regulations, and audit readiness criteria. This includes implementing robust technical safeguards such as end-to-end encryption, granular access controls, and continuous monitoring to protect sensitive financial and personal data. The contractor must also maintain comprehensive compliance documentation to demonstrate adherence to relevant laws and industry best practices, ensuring the system remains secure and auditable at all times. This is a subcontract opportunity posted by the City of Stillwater in Oklahoma, with a response deadline of September 2, 2026. The contract falls under NAICS code 541612, indicating it involves management consulting services related to administrative and general management. While specific performance location details are not provided, the work is expected to support the city’s debt collection infrastructure and must be executed to meet federal and state compliance obligations. There is no set-aside classification indicated, and the opportunity is open to qualified vendors capable of delivering secure, compliant technological solutions for public sector financial operations.

POSTED

DEADLINE

E-Verify & Immigration Compliance AdministrationThe contract requires comprehensive administration of E-Verify compliance for both direct hires and subcontractors, ensuring adherence to federal immigration verification protocols. Responsibilities include maintaining accurate and up-to-date I-9 documentation for all employees, implementing proper recordkeeping procedures, and providing support during federal and municipal audits to demonstrate compliance with immigration and employment eligibility standards. The scope emphasizes proactive compliance management to mitigate risk and ensure alignment with regulatory requirements across all tiers of the workforce. This subcontract is issued under NAICS code 541612 for administrative management and general management consulting services, with a response deadline of September 30, 2026. The contracting entity is Public Transit in Arizona, though specific details regarding the office location or point of contact are not provided. The contract is open for bidding as a subcontract opportunity with no designated set-aside classification, and interested parties must respond through the designated online portal prior to the deadline.

POSTED

DEADLINE

Background Check and Compliance ProcessingThe contract requires the administration of fingerprinting, Department of Justice and California Bureau of Investigations background checks, and gate clearance processing for interpreters seeking access to facilities under the California Department of Corrections and Rehabilitation. All services must ensure full compliance with CDCR’s strict access and security protocols, verifying the suitability of interpreters for entry into correctional institutions. The work involves coordinating and managing the end-to-end process from initial collection of biometric data through final approval of gate clearance, ensuring timely and accurate processing to support operational needs. The subcontract is solicited under NAICS code 541612, focusing on administrative management and general management consulting services related to compliance. Interested parties must submit responses by August 21, 2026, and the opportunity is posted on the CalEprocure portal. Performance of the services is tied to CDCR facilities statewide, with no specific city or location designated as the sole place of performance. This contract is critical to maintaining security standards and facilitating lawful access for interpreters serving correctional populations.

California Department of Corrections & Rehabilitation

POSTED

DEADLINE

Cybersecurity and Compliance ManagementThe contract requires ongoing cybersecurity and compliance management services focused on maintaining adherence to NIST SP 800-53 standards, sustaining authority to operate status, implementing robust encryption protocols, and ensuring effective incident response capabilities for payment systems. These responsibilities are critical to safeguarding sensitive financial data and ensuring regulatory alignment across all operational aspects of the systems under management. The work must be performed continuously to uphold security controls, detect and mitigate threats promptly, and respond to breaches in a manner that minimizes disruption and meets state and federal requirements. This subcontract is issued by the California State Controller’s office with a posted date of July 31, 2026, and a response deadline of September 9, 2026. The North American Industry Classification System code 541612 indicates the service falls under computer facilities management services, signaling a need for technical expertise in securing and managing hosted or cloud-based financial infrastructure. The place of performance and point of contact details are not specified, suggesting the work may be performed remotely or across multiple locations within California. All deliverables must align with the state’s cybersecurity framework and support uninterrupted, secure payment processing operations.

POSTED

DEADLINE

Network Adequacy and Provider Directory ValidationThe contract involves assessing the network adequacy of Managed Care Organizations to ensure they meet state and federal standards for access to care, including validating the accuracy and timeliness of provider directories through systematic audits and on-site visits. The work requires evaluating whether managed care plans maintain sufficient provider networks to serve enrollees, identifying gaps or outdated information, and confirming compliance with regulatory requirements governing timely access to clinical services. The subcontract is issued by the Mississippi Division of Medicaid and falls under NAICS code 541612, indicating it relates to management consulting services, specifically focused on health care compliance and operational evaluation. Responses to this solicitation are due by September 18, 2026, with the opportunity posted on July 31, 2026. The place of performance is not specified beyond state-level jurisdiction, but work will be conducted within Mississippi to support the state’s oversight of Medicaid managed care entities. The contract does not include a set-aside designation, making it open to all qualified bidders, and the primary objective is to strengthen accountability and transparency in provider network management to safeguard beneficiary access to necessary health services.

MS DIVISION of MEDICAID

POSTED

DEADLINE

Small Business and DVBE Participation CoordinationThe contract supports the prime contractor in fulfilling Small Business and Disabled Veteran Business Enterprise participation requirements by coordinating with certified subcontractors, ensuring accurate tracking of all relevant activities, and managing the submission of compliance reports through the STD 817 form. This role requires diligent oversight of subcontractor engagement, verification of certifications, and timely documentation to meet state-mandated goals for minority and veteran-owned business inclusion. The work is centered around compliance and administrative coordination rather than direct service delivery. The contract is classified as a subcontract under NAICS code 541612 and is solicited by the California Department of Developmental Services with performance expected to occur in Orange County. The opportunity was posted on July 31, 2026, and responses are due by October 3, 2026. It is not designated as a set-aside contract, meaning any qualified entity may bid, but all proposers must demonstrate the capacity to effectively interface with certified subcontractors and maintain strict adherence to California’s procurement compliance standards for SB and DVBE participation.

California Department of Developmental Services

POSTED

DEADLINE

CMMC Level 2 Certification Assessment (Third-Party)This contract entails an independent CMMC Level 2 assessment conducted by a Certified Third-Party Assessment Organization, fulfilling the requirements outlined in clause RD005. The scope includes a comprehensive audit of the contractor’s cybersecurity practices, a detailed review of all relevant documentation, and the delivery of a formal reporting package that validates compliance with the CMMC Level 2 framework. The assessment is performed as a subcontract under the authority of the Defense Logistics Agency, a component of the Department of Defense, and is tied to NAICS code 541612, indicating the nature of the services involves administrative management and general management consulting services. The work is expected to be performed in support of defense-related cybersecurity readiness, though the exact location of performance is unspecified. The contract was posted on July 31, 2026, and is accessible via the DIBBS portal under the referenced contract identifiers.

Defense Logistics Agency

POSTED

DEADLINE

Export-Controlled Technical Data Handling & ComplianceThe contract requires strict adherence to ITAR and EAR regulations for the secure handling, storage, and dissemination of technical data related to a diving tool, ensuring all controlled information is protected against unauthorized access or disclosure. Compliance with DFARS export control requirements is mandatory, including the implementation of robust access controls, secure storage protocols, and documented procedures to manage the flow of sensitive technical information throughout the subcontract lifecycle. All personnel with access to the data must be trained and cleared in accordance with U.S. export control laws, and systems used for handling the data must be validated to meet stringent security standards. This subcontract is issued under the Department of Defense through the Defense Logistics Agency, with the NAICS code 541612 indicating engineering services. The solicitation was posted on July 31, 2026, and responses are due by August 10, 2026. While the place of performance and specific office details are not provided, the requirement applies regardless of location, and all activities involving the technical data must remain fully compliant with federal export control frameworks. Failure to meet these compliance obligations could result in termination, penalties, or loss of export privileges.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance Support (Third-Party Assessment Provider)The contract engages a third-party provider to deliver cybersecurity validation services for financial institutions by administering and certifying the Cyber Risk Assessment Questionnaire as an alternative to traditional SOC-2 reports. This arrangement shifts the compliance burden from standardized auditing frameworks to a specialized, tailored assessment process designed to evaluate and validate the cybersecurity postures of financial entities. The provider is responsible for ensuring the integrity, consistency, and regulatory alignment of the questionnaire throughout its deployment, maintaining rigorous standards for certification without reliance on established external audit reports. The agreement is structured as a subcontract under the NAICS code 541612, targeting cybersecurity consulting and related services, with a response deadline of June 1, 2028, and a posted date of July 31, 2026. It is affiliated with the Finance agency in California, though specific office locations and point of contact details are not provided. The scope emphasizes replacing SOC-2 validation with a proprietary assessment framework, implying the need for the provider to establish credible, audit-ready methodologies that financial institutions can confidently use for regulatory and partner compliance purposes. The contract does not specify set-aside status or geographic performance constraints beyond the broader jurisdiction of California.

POSTED

DEADLINE

More opportunities from Department Of Defense → Defense Logistics Agency

Same awarding agency

NAICS: 541620

New

DIBBS

Radioactive Materials Notification & ComplianceThe contract requires the screening, documentation, and labeling of radioactive materials that may be present in cutting tools exceeding regulatory thresholds, ensuring full compliance with 10 CFR 20 and Department of Defense standards. This includes identifying any radioactive contamination, maintaining accurate records, and applying appropriate labels to signify the presence of regulated materials, all performed with precision to meet federal and military safety protocols. The work must be carried out in accordance with established procedures to prevent exposure risks and ensure regulatory adherence throughout the handling and reporting process. This subcontract is issued under NAICS code 541620 by the Defense Logistics Agency, a component of the Department of Defense, with performance required at a location in Springfield, ZIP 65803-9513. The solicitation was posted on August 2, 2026, and responses are due by August 13, 2026, indicating a tight turnaround for qualified vendors to submit proposals. Although no set-aside type or point of contact is specified, the emphasis on regulatory compliance and precise documentation underscores the critical nature of the task within defense supply chain safety protocols.

Environmental Consulting Services

POSTED

DEADLINE

NIST SP 800-171 CUI Compliance SupportThe contract seeks cybersecurity compliance support focused on Controlled Unclassified Information (CUI) in alignment with NIST Special Publication 800-171 requirements. The scope includes conducting a comprehensive assessment of current security controls, developing a System Security Plan that documents policies and procedures for protecting CUI, and preparing a Plan of Action and Milestones to address identified gaps and deficiencies. The work is intended to help the contractor achieve and maintain compliance with federal cybersecurity standards for handling sensitive but unclassified information within a Department of Defense environment. This is a subcontract under the Defense Logistics Agency, with performance expected to occur in Springfield, ZIP 65803-9513. The North American Industry Classification System code is 541512, indicating it involves computer systems design and related services. The solicitation was posted on August 2, 2026, with responses due by August 13, 2026. All deliverables must align with mandatory federal cybersecurity frameworks, and the successful party will be expected to demonstrate expertise in CUI protection, NIST 800-171 implementation, and remediation planning for DoD-related systems.

Computer Systems Design Services

POSTED

DEADLINE

Defense Logistics Packaging & Labeling ServicesThe contract requires military-compliant packaging, labeling, and palletization of cutting tools in strict accordance with MIL-STD-129 and specific Defense Logistics Agency directives including TCN, DIC, RDD 555, and Project Code TP 2. All work must adhere to the detailed technical and procedural standards set forth by the Department of Defense to ensure uniformity, traceability, and operational readiness across the military supply chain. The performance location is specified as Springfield with a ZIP code of 65803-9513, and the contract is classified as a subcontract under NAICS code 493190. The solicitation was posted on August 2, 2026, with a response deadline of August 13, 2026, and is managed by the Defense Logistics Agency under the Department of Defense. The contract is accessible through the DIBBS platform via the provided URL, and all prospective bidders must ensure full compliance with the military packaging and labeling specifications to meet the agency’s operational requirements. No set-aside type is designated, and the contract remains open to eligible subcontractors capable of meeting the rigorous DLA standards.

Other Warehousing and Storage

POSTED

DEADLINE

Hazardous Materials Compliance & SDS ManagementThe contract requires comprehensive identification, labeling, and documentation of all hazardous materials used in or associated with cutting tools, ensuring full compliance with regulatory standards. This includes the accurate generation and maintenance of Safety Data Sheets (SDS) that meet required specifications, covering material composition, handling procedures, health and environmental hazards, and emergency response measures. All labeling must align with international and domestic regulations to ensure safe handling, storage, and transportation throughout the supply chain. The subcontract is issued by the Defense Logistics Agency under the Department of Defense, with performance required in Springfield, Missouri, and a response deadline of August 13, 2026. It falls under NAICS code 541690, indicating its focus on other scientific and technical consulting services, specifically relating to regulatory compliance and safety documentation. The solicitation is open to qualified subcontractors capable of delivering precise, auditable SDS records and robust hazardous materials management protocols to support defense-related manufacturing operations.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Precision Cutting Tool ManufacturingThe contract requires the manufacture of a precision cutting tool identified by NSN 3455014066836 to meet rigorous military specifications, encompassing exacting standards for materials, dimensional tolerances, and performance under operational conditions. The work must be executed in accordance with defense-grade quality controls to ensure reliability and durability in high-stakes environments, with all components and processes aligned to established military and industrial benchmarks. This subcontract is part of a broader effort by the Defense Logistics Agency, under the Department of Defense, to secure critical tooling for military applications. The opportunity was posted on August 2, 2026, with a response deadline of August 13, 2026, and is classified under NAICS code 332710 for industrial machinery manufacturing. Performance of the contracted work is designated to take place in Springfield, with the zip code 65803-9513 serving as the official place of performance. While no set-aside designation or specific point of contact is provided, interested parties must submit proposals through the designated DIBBS portal linked in the solicitation to be considered for award.

POSTED

DEADLINE

Domestic Freight and Delivery LogisticsThe contract under the title Domestic Freight and Delivery Logistics involves the transportation of batteries from the contractor’s designated shipping point to two destination locations: Sacramento, CA and Wadesboro, NC, with all shipments governed by FOB Origin terms, meaning title and risk of loss transfer to the buyer at the point of origin. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, is classified under NAICS code 484220, indicating it pertains to specialized freight trucking services. The solicitation was posted on August 2, 2026, with proposals due by August 13, 2026, and the primary place of performance is listed as Wadesboro, NC, with a zip code of 28170-0000. The contract does not specify a set-aside type or organization type, and no point of contact information is provided in the data. Bidders must ensure compliance with FOB Origin requirements and be prepared to handle logistics to both specified locations under the terms outlined in the solicitation.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Quality Inspection and Conformance TestingThe contract requires the performance of comprehensive quality inspections for both incoming and outgoing materials adhering strictly to MIL-STD-1916 or ASQ Z1.4 standards, with an absolute mandate for zero non-conformances. This includes systematic sampling procedures and the accurate documentation and reporting of any deviations or failures, ensuring full conformance to defense-grade quality requirements. The work is tied to a subcontract under the Defense Logistics Agency, part of the Department of Defense, with performance specifically located in Wadeboro, North Carolina, zip code 28170-0000. The solicitation, classified under NAICS code 541380, was posted on August 2, 2026, and responses are due by August 13, 2026, with no set-asides indicated. All inspection activities must be executed with precision to meet stringent military standards and maintain supply chain integrity for defense-related applications.

Testing Laboratories and Services

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)The contract requires the implementation of cybersecurity controls aligned with NIST SP 800-171 and compliance with DFARS 252.204-7012 to protect Covered Defense Information handled by the contractor. This includes establishing and maintaining a robust security framework to safeguard sensitive data within systems and networks, ensuring all required access controls, audit capabilities, media protection, personnel security, and system integrity measures are fully operational. The contractor must also be prepared to report any cyber incidents affecting Covered Defense Information in accordance with specified timelines and procedures outlined in the regulation. This subcontract is issued under the Department of Defense’s Defense Logistics Agency, with performance required at Wadeboro, North Carolina, under NAICS code 541512 for computer systems design services. The solicitation was posted on August 2, 2026, with responses due by August 13, 2026, and is open to eligible subcontractors participating in defense-related supply chains. Compliance is mandatory and subject to verification, with failure to meet requirements potentially resulting in contract termination, penalties, or loss of eligibility for future DoD work.

Computer Systems Design Services

POSTED

DEADLINE

Military-Compliant Packaging and LabelingThe contract requires comprehensive packaging and labeling of batteries in strict compliance with MIL-STD-2073-1E, including adherence to Special Marking Code 32, which dictates specific identification and handling requirements for military-grade battery components. Additionally, all labeling must satisfy hazard communication standards under 29 CFR 1910.1200 and MIL-STD-129, ensuring accurate depiction of chemical hazards, handling instructions, and standardized barcoding for military logistics systems. This work is classified as a subcontract under NAICS code 493190 and is managed by the Defense Logistics Agency under the Department of Defense, with performance required at the facility located in Wadeboro, North Carolina, 28170-0000. All offerings must be submitted by the response deadline of August 13, 2026, after which no further considerations will be accepted.

Other Warehousing and Storage

POSTED

DEADLINE

Sealed Lead Acid Battery Supply (Type I, 12-Month Shelf Life)The contract seeks the supply of commercial off-the-shelf sealed lead acid batteries classified as Type I, fully compliant with Defense Logistics Agency technical specifications and featuring a non-extendable 12-month shelf life from the date of manufacture. The batteries must be mercury-free except where mercury is functionally necessary, at which point secondary containment is required to ensure environmental and safety compliance. Performance is specified to occur at Wadeboro, North Carolina, with a zip code of 28170-0000, and the contract is structured as a subcontract under NAICS code 334416, categorizing it within battery manufacturing. The solicitation was posted on August 2, 2026, and response submissions are due by August 13, 2026, with no provision for extension. The issuing agency is the Defense Logistics Agency under the Department of Defense, and the contract is accessible via the DIBBS portal for eligible vendors seeking to respond.

Capacitor, Resistor, Coil, Transformer, and Other Inductor Manufacturing

POSTED

DEADLINE

Transportation & Delivery LogisticsThe contract requires the timely and secure transportation of valves through both domestic and international routes to the designated FPO address 96678, with mandatory use of the fastest traceable shipping methods approved under Department of Defense standards. All shipments must include TCN/RDD tracking systems to ensure real-time visibility and accountability, and full compliance with Defense Logistics Agency shipping regulations is strictly enforced, specifically excluding the use of parcel post services. The work falls under NAICS code 484220 and is classified as a subcontract, with a response deadline of August 13, 2026, following a posted date of August 2, 2026. Performance is centered on the FPO address, and all logistics must align with DLA’s procedural requirements for military and government shipments.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Hazard Communication & Safety Compliance SupportThe contract requires the development of hazard warning labels, safety data sheets, and compliance documentation for hazardous materials used in packaging or integrated into valve components, ensuring full adherence to DFARS and OSHA regulations. All deliverables must accurately reflect the chemical properties, handling procedures, and risk mitigations associated with the materials, supporting safe transportation, storage, and use within defense supply chains. The work must align with federal compliance standards and be delivered to meet stringent military procurement requirements. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, with a place of performance designated as FPO 96678. The solicitation was posted on August 2, 2026, and responses are due by August 13, 2026. The North American Industry Classification System code is 541690, indicating it falls under other scientific and technical consulting services. There is no specified set-aside status, and the opportunity is open to qualified vendors capable of delivering compliant hazard communication materials on schedule.

Other Scientific and Technical Consulting Services

POSTED

about 5 hours ago

DEADLINE

in 11 days

View Details