CMMC and NIST SP 800-171 Compliance Support

This subcontract opportunity with the United States Navy focuses on providing cybersecurity auditing and implementation services for prime contractors engaged in R&D projects. The primary objective is to ensure the protection of Controlled Unclassified Information by implementing NIST SP 800-171 controls and preparing organizations for CMMC assessments. The selected provider will utilize auditing software and secure storage solutions to deliver critical documentation, specifically the System Security Plan and the Plan of Action and Milestones. The contract is designated as a total small business set-aside under NAICS code 541512, specifically targeting firms with fewer than 500 employees. Qualified candidates must possess deep technical expertise in CMMC and NIST SP 800-171 frameworks. Interested parties must submit their responses by December 2, 2026.