Cyber Incident Reporting and NIST SP 800-171 Compliance Support

This contract supports the implementation of NIST Special Publication 800-171 security controls and ensures compliance with cyber incident reporting requirements under FAR 252.204-7012 for covered defense information. The work is focused on helping contractors meet federal cybersecurity standards designed to protect sensitive unclassified information within the defense supply chain, requiring the establishment, validation, and maintenance of appropriate administrative, physical, and technical safeguards. Efforts will include assessing current security postures, documenting control implementations, developing incident response protocols, and ensuring timely reporting of cyber incidents as mandated by regulation. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside category, limited exclusively to small business concerns as defined by the North American Industry Classification System code 541512, which covers custom computer programming services. It is issued under the Maritime Supply Chain office of the Department of Defense and requires performance to align with federal cybersecurity obligations, though the specific place of performance is not detailed. Responses are due by August 6, 2026, and interested parties are expected to submit proposals through the DIBBS platform, ensuring alignment with all applicable regulatory and procedural requirements for defense subcontracting and information protection.