Cybersecurity Compliance (NIST SP 800-171 Implementation)

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard covered defense information, with specific responsibilities including the development of a System Security Plan, management of Plans of Action and Milestones, and timely cyber incident reporting in accordance with federal requirements. All activities must align with the stringent standards outlined in NIST SP 800-171 to ensure continuous protection of sensitive data throughout the contract lifecycle. This is a subcontract under a Total Small Business Set-Aside, designated for firms certified under the SBA’s small business program, with the North American Industry Classification System code 541512 for custom computer programming services. The solicitation was posted on July 28, 2026, and responses are due by August 12, 2026. The contracting activity falls under the Department of Defense’s Strategic Acquisition Program Directorate, with performance details unspecified beyond the general scope of cybersecurity compliance, and the official solicitation is accessible through the DIBBS portal.