Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation, documentation, and assessment of cybersecurity controls aligned with NIST Special Publication 800-171 for systems that handle controlled unclassified information, ensuring compliance with federal standards for protecting sensitive data. The contractor must establish and maintain the necessary technical and administrative safeguards, thoroughly document all control implementations, and conduct a self-assessment resulting in a verifiable score to demonstrate adherence to the requirements. This effort is critical to safeguarding CUI within the scope of performance located in N Stonington, Connecticut, and must be completed under the auspices of the Department of Defense’s Maritime Supply Chain ESOC Buys. The subcontract is open for response until August 3, 2026, with a NAICS code of 541512 indicating it falls under Custom Computer Programming Services. The solicitation is being managed through the DIBBS platform, and while no set-aside type is specified, the work is tied to a federal defense agency requiring strict cybersecurity posture. Successful performance depends on accurate documentation, timely submission of the self-assessment score, and full alignment with NIST 800-171 requirements to meet contractual obligations and enable continued access to CUI-bearing systems under the Department of Defense’s purview.