Cybersecurity & NIST SP 800-171 Compliance Support

The contract requires the implementation and documentation of NIST SP 800-171 security controls across all covered contractor information systems to meet the requirements of DFARS 52.204-93, ensuring the protection of controlled unclassified information. The contractor must conduct a thorough self-assessment of compliance with the NIST controls and formally document the results, including any identified gaps and remediation plans. This obligation extends to all subcontractors through mandatory flow-down clauses, requiring the prime contractor to ensure that every tier of the supply chain adheres to the same cybersecurity standards and provides verifiable compliance documentation. Performance is tied to a specific location at Cherry Point, North Carolina, with a submission deadline of July 31, 2026, and the work falls under NAICS code 541512 for computer systems design services. The contracting entity is the Department of Defense under the Maritime Supply Chain organization, indicating this effort supports critical defense-related operations. The contractor must maintain rigorous oversight of subcontractor compliance and be prepared to demonstrate full adherence to federal cybersecurity mandates throughout the contract term, with no set-aside provisions specified, meaning all eligible businesses may compete.