NIST SP 800-171 CUI Compliance Support

The contract seeks cybersecurity compliance support focused on Controlled Unclassified Information (CUI) in alignment with NIST Special Publication 800-171 requirements. The scope includes conducting a comprehensive assessment of current security controls, developing a System Security Plan that documents policies and procedures for protecting CUI, and preparing a Plan of Action and Milestones to address identified gaps and deficiencies. The work is intended to help the contractor achieve and maintain compliance with federal cybersecurity standards for handling sensitive but unclassified information within a Department of Defense environment. This is a subcontract under the Defense Logistics Agency, with performance expected to occur in Springfield, ZIP 65803-9513. The North American Industry Classification System code is 541512, indicating it involves computer systems design and related services. The solicitation was posted on August 2, 2026, with responses due by August 13, 2026. All deliverables must align with mandatory federal cybersecurity frameworks, and the successful party will be expected to demonstrate expertise in CUI protection, NIST 800-171 implementation, and remediation planning for DoD-related systems.