Cybersecurity Compliance Assessment & Reporting

The contract requires the performance of NIST SP 800-171 Rev 1 self-assessments for Department of Defense contractors to evaluate their cybersecurity posture against specified security controls. The contractor must thoroughly document implemented controls, calculate a compliance score out of 110 possible points, and formally submit the assessment results through either SPRS or WAWF as required by DoD policy. Timeliness and accuracy in scoring and reporting are critical to ensure contractors remain in compliance with federal cybersecurity standards. In the event of a challenge or rebuttal from the DoD, the contractor is obligated to respond comprehensively within 14 business days to address any discrepancies or concerns raised. This subcontract is classified as a Small Business Set Aside under SBA regulations and is associated with NAICS code 541612, indicating it is for management consulting services related to cybersecurity. The primary place of performance is Bremerton, Washington, with the contracting activity led by DLA Maritime - Puget Sound under the Department of Defense. The opportunity was posted on July 28, 2026, with a strict response deadline of July 29, 2026, suggesting a rapid procurement timeline. The nature of the work demands precision, familiarity with federal cybersecurity frameworks, and the ability to coordinate closely with DoD contractors to ensure accurate and timely compliance submissions.