Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract seeks support for achieving and maintaining compliance with NIST SP 800-171 to safeguard Controlled Unclassified Information within systems operating under the Maritime Supply Chain organization of the Department of Defense. The work involves conducting comprehensive assessments of current security postures, identifying gaps in security controls, and implementing required measures to meet NIST standards, ensuring that all systems handling CUI are properly protected against cyber threats. The effort is focused on system-wide evaluation and remediation to align with federal cybersecurity requirements and maintain continuous compliance. The contract is structured as a subcontract under a Total Small Business Set-Aside, restricted to small businesses as defined by the SBA, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 14, 2026. Performance is expected to support the Department of Defense’s operational needs, though specific location details are not provided. All work must be performed in accordance with federal cybersecurity mandates, and successful offerors must demonstrate proven experience in NIST SP 800-171 assessments, control implementation, and CUI protection within defense-related environments.