NIST SP 800-171 Compliance Implementation & System Security Planning

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 Revision 1 to safeguard covered defense information within the contractor’s systems. This includes the development and continuous updating of System Security Plans to document control implementation, configuration, and risk management strategies. The contractor must actively support Department of Defense assessments related to compliance, providing necessary documentation and evidence to validate adherence to required security measures. All activities must align with the regulatory mandates of DFARS 252.204-7012 and DFARS 252.204-7020, which govern the protection of controlled unclassified information in nonfederal systems and specify reporting obligations for cyber incidents. The work is structured as a subcontract under the Department of Defense, with performance centered in New Cumberland, Pennsylvania, and tied to the NAICS code 541611 for management consulting services. The solicitation was posted on June 25, 2026, with a firm response deadline of June 30, 2026. While no set-aside type is specified, the contract is part of the Defense Logistics Agency’s procurement framework and requires full compliance with federal cybersecurity standards applicable to defense supply chain contractors. Success requires a proven ability to operationalize NIST controls, maintain audit readiness, and collaborate effectively with DoD oversight entities throughout the contract lifecycle.