Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This subcontract opportunity involves performing either a Basic or High Assessment of NIST SP 800-171 controls to ensure compliance with DFARS cybersecurity requirements. The contractor is expected to evaluate the cybersecurity controls in place and report the findings to the Supplier Performance Risk System (SPRS), supporting the Department of Defense’s efforts to secure sensitive information. This work falls under the NAICS code 541611 and is designated as a Total Small Business Set-Aside, indicating that only small businesses are eligible to compete. The contract is issued by DLA Maritime - Norfolk, part of the Department of Defense, with the place of performance specified as Portsmouth, ZIP code 23709. The solicitation was posted on May 15, 2026, with responses due by May 20, 2026, at 4:00 PM. This opportunity addresses subcontracting requirements for cybersecurity assessments crucial to maintaining compliance with federal defense acquisition regulations, and the contractor’s role will be pivotal in evaluating and reporting on the effectiveness of NIST SP 800-171 implementation.