NIST SP 800-171 Compliance and Cybersecurity Support

This contract requires the implementation and assessment of NIST SP 800-171 security controls to protect controlled unclassified information within contractor systems, ensuring compliance with federal cybersecurity standards for sensitive but unclassified data. The effort involves evaluating existing IT environments, identifying gaps in current security postures, and applying the full suite of NIST controls to meet requirements for safeguarding CUI across all aspects of system design, access, configuration, and monitoring. The scope includes documentation of control implementation, verification through assessment methods, and ongoing support to maintain compliance as systems evolve or new threats emerge. The contract is structured as a subcontract under the Department of Defense’s Strategic Acquisition Program Directorate, with a NAICS code of 541512 indicating it falls under computer systems design and related services. It was posted on July 23, 2026, with responses due by August 7, 2026, requiring proposers to demonstrate proven experience in NIST 800-171 compliance, prior work with defense contractors or government systems, and the capability to conduct formal assessments and remediation planning. The place of performance is not specified, implying work may be performed remotely or at multiple contractor locations, but must fully align with DoD cybersecurity mandates and be deliverable in accordance with federal contract obligations.