Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract requires the implementation and thorough documentation of cybersecurity controls aligned with NIST Special Publication 800-171 to protect covered defense information within the contracting environment. The scope includes assessing systems for compliance with all required safeguards, identifying gaps, and producing formal reports that demonstrate adherence to the standard. The work must be performed under a total small business set-aside as defined by the SBA and governed under FAR 19.5, ensuring eligibility and participation are limited to qualified small businesses. The North American Industry Classification System code 541512 identifies this effort as occurring within the computer systems design services sector, emphasizing the technical and advisory nature of the tasks involved. The contract is issued under the Department of Defense through the Maritime Supply Chain organization and is classified as a subcontract, meaning it supports a larger prime contract or program. Performance location details are unspecified, indicating possible flexibility or remote execution, though compliance and reporting must meet all federal standards. The solicitation was posted on July 22, 2026, with responses due by August 6, 2026, establishing a narrow window for proposals. All work must be completed within the timeframe and according to the technical requirements outlined in NIST SP 800-171, with a focus on ensuring the confidentiality, integrity, and availability of controlled unclassified information handled by the contractor.