Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract focuses on implementing NIST SP 800-171 security controls to ensure the protection of Controlled Unclassified Information (CUI). It requires the development and maintenance of System Security Plans (SSPs) outlining the security requirements and controls in place, as well as timely reporting of any cyber incidents that could impact the confidentiality, integrity, or availability of CUI. This effort is critical for maintaining compliance with Department of Defense cybersecurity mandates and enhancing the security posture of the maritime supply chain. Scheduled as a subcontract opportunity under NAICS code 541512, the solicitation was posted on May 1, 2026, with a response deadline of May 11, 2026. The Department of Defense’s Maritime Supply Chain ESOC BUYS agency is overseeing the procurement, although specific location details for performance and points of contact are not provided. The contract aims to identify qualified cybersecurity providers capable of delivering specialized compliance, documentation, and incident reporting services in support of federal cybersecurity standards.