Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires comprehensive cybersecurity implementation and assessment services tailored to meet NIST SP 800-171 and DFARS 252.204-7012 compliance standards, ensuring proper safeguarding of controlled unclassified information within the defense supply chain. Services must include full evaluation of existing controls, development and execution of a remediation plan to close gaps, and preparation of System Security Plan documentation aligned with federal requirements. The contractor is also responsible for submitting accurate and timely SPRS assessment scores to the Supplier Performance Risk System and maintaining full audit readiness at all times, including documentation retention and staff training to support inspections and evaluations. This subcontract is designated as a Small Business Set Aside under NAICS code 541512, meaning only qualified small businesses are eligible to respond. The place of performance is located in Kittery, 03904, with work tied to DLA Maritime in Portsmouth under the Department of Defense. The solicitation was posted on July 31, 2026, with a firm response deadline of August 11, 2026, at 9:00 PM. All proposals must demonstrate proven experience in federal cybersecurity compliance, a clear methodology for achieving and sustaining NIST 800-171 requirements, and the capability to deliver immediate and measurable results in audit preparation and compliance reporting.