Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract involves conducting a NIST SP 800-171 assessment and developing a System Security Plan (SSP) to ensure compliance with DFARS 252.204-7012 requirements for Controlled Unclassified Information (CUI) protection. The work supports cybersecurity compliance efforts specifically for the Department of Defense, under the DLA Maritime - Norfolk office, with the place of performance in Portsmouth, ZIP code 23709. This subcontract is designated as a Total Small Business Set-Aside under SBA regulations (FAR 19.5), aligned with NAICS code 541612, which pertains to administrative management and general management consulting services. The solicitation was posted on May 4, 2026, with a response deadline of May 12, 2026. The project’s primary goal is to enhance the cybersecurity posture of the DoD entity by assessing current security controls and creating documentation necessary to meet federal cybersecurity standards for protecting sensitive unclassified information.