Cybersecurity Compliance Support (NIST SP 800-171)

This contract supports the implementation and assessment of NIST SP 800-171 security controls as mandated by DFARS 252.240-7997, specifically for handling Controlled Unclassified Information. The contractor will be responsible for ensuring full compliance through the development, documentation, and maintenance of required cybersecurity practices, with an emphasis on achieving audit readiness. All activities must align with federal cybersecurity standards and demonstrate verifiable adherence to the 110 controls outlined in NIST SP 800-171, covering areas such as access control, awareness training, audit and accountability, configuration management, and incident response. The work is classified as a subcontract under the NAICS code 541512 for Computer Systems Design Services and will be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026. The contracting office is the ASC Commodities Division within the Department of Defense, and the prime contractor will need to demonstrate proven expertise in DIB cybersecurity compliance, particularly in supporting defense contractors with CUI protection requirements. All deliverables must be structured to withstand rigorous government audits and ensure continuous compliance throughout the lifecycle of the contract.