NIST SP 800-171 Cybersecurity Compliance Support

The contract pertains to the implementation and assessment of NIST SP 800-171 cybersecurity controls for systems that handle Controlled Unclassified Information, requiring full alignment with federal standards to protect sensitive data. Efforts include developing a System Security Plan that documents security requirements, control implementation strategies, and organizational policies, along with ensuring audit readiness through documentation, testing, and continuous compliance monitoring. The work is targeted toward achieving and maintaining a state of verified compliance that meets Department of Defense expectations for safeguarding CUI. Performance of this subcontract is located at Dyess Air Force Base with a zip code of 79607-1510 and falls under the NAICS code 541512 for computer systems design services. The solicitation was posted on July 14, 2026, with a firm response deadline of July 27, 2026. The contracting entity is the Active Devices Division under the Department of Defense, and the work is expected to support critical infrastructure operations tied to defense systems requiring strict adherence to cybersecurity frameworks. Participation requires proven experience in NIST 800-171 implementation, SSP development, and prior engagement with government audits or assessments.