Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract seeks support for developing a System Security Plan aligned with NIST SP 800-171 requirements to ensure compliance with DFARS 252.204-7012 for protecting Covered Defense Information. The work involves conducting a thorough assessment of the contractor’s security controls, identifying gaps, and implementing necessary improvements to meet federal cybersecurity standards for defense contractors. This effort is critical for safeguarding sensitive information managed under Department of Defense contracts and ensuring operational readiness and regulatory adherence. The task is structured as a subcontract under the NAICS code 541611, with a performance location in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on May 8, 2026, and responses are due by May 13, 2026. The contracting entity is the Maritime Supply Chain under the Department of Defense, and the work will focus on fulfilling statutory obligations related to cybersecurity controls without reliance on external set-aside classifications. Success requires detailed documentation, precise control mapping, and validation of security practices to pass the NIST assessment and maintain eligibility for DoD work.