Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) within the Department of Defense environment. The work encompasses developing a comprehensive System Security Plan, managing a Plan of Action and Milestones to address identified gaps, and ensuring full readiness for Department of Defense assessments. The contractor must demonstrate continuous compliance with federal cybersecurity standards and maintain documented evidence of control implementation throughout the contract period. The opportunity is designated as a Women-Owned Small Business Set-Aside under NAICS code 541512 and is structured as a subcontract. It was posted on August 3, 2026, with a response deadline of August 18, 2026. Performance will be in support of the Strategic Acquisition Program Directorate, though the specific place of performance is not detailed. All deliverables must align with DoD expectations for CUI protection and assessment readiness, requiring thorough documentation, adaptive security practices, and close coordination with federal oversight entities.