Cybersecurity Compliance Support (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with cyber incident reporting obligations under DFARS 252.204-7012. The work involves establishing a robust cybersecurity posture aligned with federal standards, including configuring systems, documenting policies, conducting assessments, and maintaining continuous compliance to meet Department of Defense requirements. All activities must be performed to protect sensitive data handled by the contractor and to enable timely and accurate reporting of any cyber incidents affecting covered information systems. The contract is structured as a subcontract and is set-aside exclusively for Service-Disabled Veteran-Owned Small Businesses, reflecting a targeted procurement to support veteran-owned enterprises. It falls under NAICS code 541512 for Computer Systems Design Services, indicating a focus on technical implementation and advisory support rather than general IT operations. The solicitation was posted on July 15, 2026, with responses due by July 20, 2026, and is managed by the LSO Combat Vehicles and Armament office under the Department of Defense. Performance will occur at an unspecified location, and interested parties must submit their proposals through the designated DIBBS portal prior to the deadline to be considered.