Cybersecurity Compliance and CMMC/NIST SP 800-171 Implementation

The contract calls for comprehensive cybersecurity consulting and implementation services focused on achieving compliance with DFARS 252.204-7012 and NIST SP 800-171 requirements. Services include reviewing and refining the System Security Plan, conducting a CMMC Level 1 self-assessment, and preparing and submitting the results through the Supplier Performance Risk System. The work is intended to support an organization’s ability to meet federal cybersecurity standards for handling controlled unclassified information, ensuring alignment with Department of Defense expectations. The engagement is structured as a subcontract under the NAICS code 541512, reflecting its focus on computer systems design and related services. The opportunity was posted on July 22, 2026, with a response deadline of July 27, 2026, and is associated with the Naval Undersea Warfare Center Division Newport under the Department of Defense. The place of performance and specific office details are not specified, indicating the work may be performed remotely or at the contractor’s facility. The absence of a set-aside designation suggests the contract is open to all eligible contractors, and the primary objective is timely, accurate execution of cybersecurity compliance tasks to meet DOD mandates without delay.