Security Controls Implementation and Testing

The contract requires the implementation and periodic testing of 15 NIST SP 800-171 security controls designed to safeguard Federal Contract Information and Controlled Unclassified Information. These controls must be fully integrated into the contractor’s systems and processes, with ongoing verification to ensure continuous compliance and resilience against threats. The work is classified as a subcontract under NAICS code 541512, indicating it involves computer systems design services, and is issued by the Department of Veterans Affairs through the Technology Acquisition Center NJ. The solicitation was posted on July 21, 2026, with a strict response deadline of July 24, 2026, leaving limited time for submission. The place of performance and specific location details are not specified, suggesting the work may be performed remotely or at the contractor’s own facility, provided all security requirements are met. The focus is on rigorous adherence to federal cybersecurity standards without requiring specific set-asides or organizational qualifications beyond compliance with the NIST framework.