Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires support to a prime contractor in achieving full compliance with DFARS 252.204-7012 for the protection of covered defense information, with a focus on implementing the National Institute of Standards and Technology Special Publication 800-171 security controls. This includes conducting system assessments to evaluate current cybersecurity posture, developing and maintaining System Security Plans that articulate how required controls are implemented, and creating and managing Plans of Action and Milestones to address any identified gaps or weaknesses. The work is centered on ensuring that the prime contractor meets federal cybersecurity obligations for handling sensitive defense data. Performance of the tasks will occur at Fort Bragg, North Carolina, with a specific emphasis on aligning with Department of Defense standards. The subcontract is solicited under NAICS code 541512 for computer systems design services, and responses must be submitted by August 5, 2026. The effort supports the broader mission of safeguarding controlled unclassified information in nonfederal systems and is part of a larger initiative to enforce robust cybersecurity practices across the defense industrial base.