Cybersecurity Compliance Support (NIST SP 800-171)

This contract requires the implementation and documentation of security controls outlined in NIST Special Publication 800-171 to protect unclassified defense information stored on or transmitted through contractor systems, in full compliance with DFARS clause 252.204-7012. The scope includes assessing current cybersecurity posture, identifying gaps against the required controls, deploying technical and administrative safeguards, and producing detailed documentation to demonstrate adherence to federal cybersecurity standards for handling controlled unclassified information. The work must be performed in support of the Department of Defense, specifically under the Defense Logistics Agency, and is classified as a subcontract with a NAICS code indicating it pertains to computer systems design services. All activities must align with the regulatory framework governing the protection of sensitive defense data, ensuring that systems are properly configured, monitored, and audited to meet mandatory compliance benchmarks. The contractor is responsible for maintaining accurate records of control implementation, conducting internal reviews, and preparing for potential government assessments or audits. The solicitation was posted on July 30, 2026, and the place of performance and point of contact details are not specified, implying flexibility in execution location while requiring strict adherence to the technical and procedural requirements of NIST SP 800-171.