Cybersecurity Compliance (NIST SP 800-171 / CMMC) Support

This contract supports cybersecurity compliance with NIST SP 800-171 requirements for organizations preparing for Department of Defense audits, focusing on systemic readiness through comprehensive assessments, the development of a System Security Plan, and the creation of a detailed Plan of Action and Milestones. The effort is tailored to ensure alignment with both NIST SP 800-171 and the Cybersecurity Maturity Model Certification framework, enabling the contractor to meet strict DOD security standards and successfully pass audit evaluations. All deliverables must be structured to demonstrate measurable progress toward closing security control gaps and maintaining continuous compliance. The work is to be performed at Fort Campbell, Kentucky, under a subcontract arrangement with the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, and is classified under NAICS code 541512 for computer systems design services. Responses are due by August 7, 2026, following a solicitation issued on July 30, 2026, with no set-aside designation applied. The contract emphasizes deliverables that directly contribute to audit preparedness, requiring thorough documentation and actionable remediation strategies to address identified vulnerabilities and ensure sustained adherence to federal cybersecurity mandates.