NIST SP 800-171 Compliance and Cybersecurity Support

The contract supports the implementation and assessment of NIST SP 800-171 compliance requirements to protect Controlled Unclassified Information within contractor systems, as mandated by DFARS 252.240-7997. It is structured as a subcontract under the Defense Logistics Agency, with performance taking place at Camp Lejeune, North Carolina, zip code 28542-0069. The work involves providing technical expertise to ensure systems meet the security controls outlined in NIST SP 800-171, including configuration management, access control, audit and accountability, and incident response, all necessary to safeguard CUI handled by defense contractors. The solicitation was posted on June 24, 2026, with a response deadline of July 6, 2026, and falls under NAICS code 541512 for Computer Systems Design Services. The contract requires the contractor to deliver detailed assessments, remediation plans, and ongoing support to achieve and maintain compliance with federal cybersecurity standards. All activities must align with Department of Defense directives and ensure that subcontractor environments are hardened against targeted threats to CUI. While no specific set-aside type is designated, the effort is mission-critical for the DoD’s broader cybersecurity posture, and successful performance will involve close coordination with government stakeholders to document adherence, remediate gaps, and provide audit-ready evidence of compliance across all relevant systems and networks.