NIST SP 800-171 Compliance Assessment & Cybersecurity Support

The contract requires the provision of comprehensive cybersecurity support to achieve NIST SP 800-171 compliance for the handling of Controlled Unclassified Information in alignment with DFARS 252.240-7997 requirements. This includes conducting a thorough assessment of the current security posture against the 110 controls outlined in NIST SP 800-171, developing a detailed System Security Plan that documents the organization’s security controls and implementation strategies, and creating a Plan of Action and Milestones that identifies gaps, remediation steps, timelines, and responsible parties to address deficiencies. The deliverables must ensure the contractor meets all federal cybersecurity obligations for safeguarding CUI throughout its lifecycle, particularly when working within the Department of Defense supply chain. The work is structured as a subcontract under the Defense Logistics Agency, with a response deadline of August 10, 2026, and is classified under NAICS code 541512 for Computer Systems Design Services. Performance of the services is expected to support DOD entities responsible for managing CUI, though the precise location of performance is not specified. All deliverables must be tailored to meet the specific environment and operational context of the receiving organization, ensuring regulatory alignment and operational readiness. Timely submission of accurate, complete documentation is critical to maintaining contract compliance and sustaining the ability to handle sensitive defense-related information.