Cybersecurity Compliance & NIST SP 800-171 Assessment

This contract requires the implementation and assessment of NIST Special Publication 800-171 security controls on systems that process, store, or transmit covered defense information, ensuring full compliance with federal cybersecurity standards for defense contractors. The scope includes developing a System Security Plan and performing gap analysis to identify deficiencies, followed by remediation efforts to align the organization’s security posture with NIST 800-171 requirements. All work must be performed at the designated location in Virginia Beach, Virginia, with strict adherence to the deadlines and performance expectations set forth by the Department of Defense through its Maritime Supply Chain organization. The subcontract is targeted toward entities with expertise in cybersecurity frameworks and defense information protection, and the solicitation is open for responses until July 27, 2026, with the North American Industry Classification System code 541512 indicating the focus on computer systems design and related services.