Cybersecurity Compliance (NIST SP 800-171) Support

This contract seeks support for achieving and documenting compliance with NIST SP 800-171 standards for systems that handle controlled unclassified information under DFARS requirements. The work is scoped to ensure that all technical, administrative, and physical safeguards outlined in NIST SP 800-171 are implemented, tested, and properly documented to meet federal cybersecurity obligations. The subcontractor must possess the expertise to conduct gap assessments, develop remediation plans, maintain compliance documentation, and prepare for assessments or audits by government entities. All activities must align with the requirements for protecting CUI in nonfederal systems and must be performed in accordance with the Department of Defense's cybersecurity framework. The effort is associated with the FLUID HANDLING DIVISION under the Department of Defense and requires performance at the location in Tracy, California, with a zip code of 95304-5000. The solicitation is classified as a subcontract under a Small Business Administration set-aside, with the NAICS code 541512 indicating information technology services. Responses must be submitted by July 16, 2026, with the solicitation posted on July 5, 2026. The work involves close coordination with federal compliance standards and demands proven experience in NIST 800-171 implementation, documentation, and audit readiness within defense-related environments.