Cybersecurity and Data Safeguarding (NIST SP 800-171)

The contract requires the implementation and documentation of safeguards for contractor information systems in full compliance with NIST Special Publication 800-171, focusing on the protection of controlled unclassified information. Key deliverables include the development of a comprehensive System Security Plan and readiness for evaluation under the Basic Assessment Methodology, ensuring that all required security controls are properly documented, implemented, and verifiable. The work must be performed in alignment with federal cybersecurity standards and is intended to support the Department of Defense’s Maritime Supply Chain division through a subcontract structure. This opportunity is designated as a Total Small Business Set-Aside under the SBA program, limited exclusively to small businesses as defined by FAR 19.5, with the NAICS code 541512 indicating that the work falls under Computer Systems Design Services. The solicitation was posted on August 2, 2026, with a response deadline of August 17, 2026, and performance location details are unspecified. The contract is accessible via the DIBBS platform, and all prospective bidders must demonstrate the capability to meet NIST SP 800-171 requirements without reliance on external documentation or third-party certifications beyond what is directly applicable to their own information systems.