Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the performance of comprehensive cybersecurity assessments aligned with NIST SP 800-171 Rev 1 for systems handling Controlled Unclassified Information, focusing on thorough documentation of system security planning, implementation of required security controls, and accurate reporting through the Supplier Performance Risk System. The work involves evaluating and validating compliance posture across all applicable assessment domains, ensuring that controls are operational and consistently maintained to meet federal requirements for protecting CUI. The contractor must deliver detailed assessments that support continuous monitoring and remediation efforts while maintaining strict adherence to documented procedures and audit-ready records. This is a subcontract under the Department of Defense, specifically tied to the Maritime Supply Chain organization, with a NAICS code of 541611 indicating it falls under Management, Scientific, and Technical Consulting Services. The solicitation was posted on May 8, 2026, with responses due by May 13, 2026, indicating a short turnaround for qualification and proposal submission. The place of performance and point of contact details are not specified, but all work must be conducted in accordance with federal cybersecurity guidelines and reported through official DoD channels. Successful performance will directly support the defense supply chain’s obligation to safeguard sensitive but unclassified information.