Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and documentation of all NIST SP 800-171 cybersecurity controls to ensure compliance with federal standards for protecting controlled unclassified information. The contractor must perform annual self-assessments to evaluate adherence to these controls and submit the resulting scores to the Supplier Performance Risk System (SPRS) as part of ongoing compliance reporting. This effort is critical for maintaining eligibility to handle sensitive DoD information and must be executed with precision and thoroughness to meet federal requirements. The work is scoped as a subcontract under a Small Business Set Aside, meaning only small businesses are eligible to bid, and it falls under NAICS code 541512 for computer systems design services. The opportunity is issued by the Naval Undersea Warfare Center Division Newport, a Department of Defense agency tasked with advancing undersea warfare technology, and performance will be carried out in support of its cybersecurity needs. The solicitation was posted on July 31, 2026, with a firm deadline for responses on August 5, 2026, at 10:00 PM EST. While no specific location for performance is identified, the work is expected to align with DoD cybersecurity protocols and may involve remote or on-site activities as needed to support documentation, assessment, and reporting obligations. Compliance with NIST SP 800-171 is non-negotiable, and failure to accurately implement controls or submit timely SPRS data could result in loss of contract eligibility or future business opportunities with the DoD.