Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the implementation, documentation, and assessment of cybersecurity controls for systems handling Covered Defense Information in full compliance with NIST SP 800-171 and DFARS regulations. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with all cybersecurity measures aligned to protect sensitive government data from unauthorized access, disclosure, or compromise. The successful offeror is expected to deliver comprehensive documentation demonstrating adherence to all required controls and to conduct assessments that validate the effectiveness and continuity of those controls. This subcontract is set aside exclusively for Service-Disabled Veteran-Owned Small Businesses, identifying the NAICS code 541512 as applicable, and is under the purview of the Department of Defense, specifically the Maritime Supply Chain office. Responses must be submitted by the deadline of July 30, 2026, with the solicitation posted on July 19, 2026, through the DIBBS platform. The contractor will be held accountable for ensuring end-to-end compliance throughout the lifecycle of the cybersecurity implementation and assessment process, with no tolerances for deviations from the established standards.