NIST SP 800-171 / DFARS Cybersecurity Compliance Support

This subcontract opportunity involves providing cybersecurity compliance support to the prime contractor to ensure adherence to DFARS 252.204-7012 and NIST SP 800-171 standards for systems managing Controlled Unclassified Information (CUI). The scope includes assisting in the development and maintenance of System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms), critical components for demonstrating compliance with federal cybersecurity requirements. The work is to be performed for the Naval Air Warfare Center Air Division, part of the Department of Defense, with the place of performance located in Saint Inigoes. This subcontract is designated as a Total Small Business Set-Aside under FAR 19.5, targeting businesses classified under NAICS code 541611, which covers administrative management and general management consulting services. The solicitation was posted on June 1, 2026, with responses due by June 9, 2026. The focus is on supporting prime contractors in meeting stringent DoD cybersecurity mandates to protect sensitive information within their systems.