NIST SP 800-171 Cybersecurity Compliance and Assessment

This contract requires the implementation and assessment of NIST Special Publication 800-171 cybersecurity controls on systems that process Covered Defense Information, ensuring alignment with Department of Defense requirements for safeguarding sensitive data. The work involves a thorough evaluation of existing security measures, identification of gaps in compliance, and execution of necessary remediation actions to meet the defined control objectives. A critical component of the deliverables includes preparing and submitting official DoD assessment reports that validate adherence to the NIST framework, with all findings documented and verified through formal reporting channels. The contract is structured as a small business set-aside under the SBA Total Small Business Set-Aside category, specifically targeting firms classified as small businesses under NAICS code 541512 for Computer Systems Design Services. It is issued by the Department of Defense’s Strategic Acquisition Program Directorate and has a response deadline of August 5, 2026, with the solicitation posted on July 21, 2026. Performance is expected wherever the contractor’s services are delivered, without a specified geographic location, and the work is to be conducted under a subcontract arrangement. Compliance with all NIST SP 800-171 requirements is mandatory, and successful execution will directly impact the contractor’s ability to support DoD information systems involving protected defense data.