Defense Information Systems Agency (DISA) STIG/SCAP Compliance and Assessment

The contract requires comprehensive cybersecurity compliance assessments aligned with NIST SP 800-171 and Department of Defense requirements, focusing on the implementation and validation of security controls within information systems. It involves the development of a System Security Plan and a Plan of Action and Milestones using standardized DISA SCAP tools and assessment methodologies to ensure adherence to security configuration standards. The work is centered on evaluating systems against DISA Security Technical Implementation Guides to identify gaps, document remediation paths, and validate compliance readiness across all applicable control families. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is managed by the Department of Defense through the Construction & Equipment T & IFO EQ office. The solicitation is open for responses until August 7, 2026, with performance expected to support defense information systems requiring strict adherence to federal cybersecurity frameworks. Contractors must possess demonstrated expertise in SCAP tooling, NIST 800-171 compliance, and DoD-specific security protocols, with the capability to deliver accurate, audit-ready documentation and assessment results that meet DISA’s rigorous requirements for continuous monitoring and system authorization.