NIST SP 800-171 Cybersecurity Assessment and Compliance

The contract requires cybersecurity assessment and consulting services to achieve compliance with NIST Special Publication 800-171 for the protection of covered defense information as mandated by DFARS requirements. The work is scoped to evaluate current security controls, identify gaps, and implement corrective measures to ensure adherence to the specified framework, with the goal of enabling the contractor to safeguard sensitive information handling within the defense supply chain. All services must be delivered under a Total Small Business Set-Aside, meaning only small business concerns are eligible to bid, as defined by SBA regulations under FAR 19.5. The solicitation is classified as a subcontract and is associated with NAICS code 541611, which covers management, scientific, and technical consulting services. The agency responsible is the Department of Defense under LSO COMBAT VEHICLES AND ARMAMENT, with the request for quotation available through the DIBBS platform. Responses must be submitted by August 7, 2026, and the work is expected to support the defense industrial base in meeting federal cybersecurity standards without specifying a fixed location for performance, allowing for flexibility in service delivery as long as compliance objectives are met.