Cybersecurity Compliance and NIST 800-171 Assessment Support

This contract seeks support for achieving and maintaining compliance with NIST SP 800-171 requirements, including the conduct of either a Basic or High Assessment, the development of a comprehensive System Security Plan, and the establishment of procedures for timely cyber incident reporting in accordance with DFARS clauses. The work is focused on ensuring that systems handling controlled unclassified information meet federal cybersecurity standards, with deliverables centered on documentation, assessment validation, and incident response readiness. The contract is a subcontract under a Total Small Business Set-Aside, meaning only small businesses are eligible to respond, and it falls under NAICS code 541512 for computer systems design services. The performance location is in Kittery, with a response deadline of July 20, 2026, and the sponsoring agency is the Department of Defense through DLA Maritime - Portsmouth. The effort is critical for supporting defense supply chain cybersecurity and requires proven expertise in implementing NIST controls, preparing SSPs, and navigating DoD compliance frameworks.