Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and thorough documentation of cybersecurity controls outlined in NIST Special Publication 800-171 to protect Covered Defense Information, ensuring compliance with federal safeguards for sensitive government data. The scope includes conducting a self-assessment to evaluate readiness and gaps in current security practices, along with developing a detailed incident response plan to address potential cyber threats or data breaches. All activities must align with the stringent requirements mandated for handling defense-related information and must be completed within the timeframe specified by the solicitation. The opportunity is structured as a subcontract and is designated as a Total Small Business Set-Aside under the SBA program, meaning only small businesses are eligible to respond. The North American Industry Classification System code 541512 categorizes the work under computer systems design and related services. The solicitation is managed by the Department of Defense’s Strategic Acquisition Program Directorate, and responses are due by August 20, 2026. While the place of performance and point of contact details are not provided, contractors must be prepared to meet all federal cybersecurity obligations and demonstrate full adherence to NIST SP 800-171 standards through documented processes and verified outcomes.