Cybersecurity Compliance (NIST SP 800-171) Support

The contract obligates the provider to deliver comprehensive cybersecurity compliance services focused on NIST SP 800-171 requirements to protect controlled unclassified information as mandated by DFARS 252.204-7012. This includes performing detailed assessments of current security controls, documenting findings and gaps, and implementing remediation strategies to achieve and maintain full compliance. The scope encompasses systematic documentation of security policies, procedures, and evidence of implementation across all relevant systems and processes handling CUI to meet federal defense standards. The work is performed under a subcontract awarded by the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 541512 indicating it falls under computer systems design services. The contract was posted on July 20, 2026, and the place of performance is not specified, suggesting work may be performed remotely or at multiple locations consistent with the nature of cybersecurity support. The contract is not subject to a specific small business set-aside, and the primary objective is to ensure the defense supply chain meets mandated cybersecurity hygiene standards for safeguarding sensitive but unclassified information.