Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the implementation and assessment of NIST SP 800-171 security controls to attain CMMC Level 2 compliance for a Department of Defense entity within the Maritime Supply Chain. The work involves developing a System Security Plan and a Plan of Action and Milestones, both of which must be properly documented and submitted to the Department of Defense. The effort is focused on ensuring that cybersecurity practices align with federal standards to safeguard Controlled Unclassified Information, with all deliverables targeted toward achieving formal CMMC certification. The place of performance is designated as New Cumberland, Pennsylvania, with the ZIP code 17070-5002. This subcontract is set aside entirely for small businesses under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541512, indicating it is categorized under Computer Systems Design Services. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026. The contracting activity falls under the Department of Defense, and the work will be performed in support of a federal cybersecurity compliance mandate. All activities must be completed in accordance with DIBBS system requirements and the provided solicitation link, with no flexibility permitted on the set-aside status or compliance delivery expectations.