Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract entails performing a cybersecurity compliance assessment in accordance with NIST Special Publication 800-171 to ensure alignment with the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This includes evaluating the current security posture of systems handling controlled unclassified information and identifying gaps against the required 110 security controls. The contractor is responsible for developing a System Security Plan that documents the organization’s security requirements and implementation strategies, as well as a Plan of Action and Milestones that outlines corrective actions, timelines, and responsible parties for addressing identified deficiencies. The assessment must be thorough and compliant with federal cybersecurity standards as applied to defense contractors. Performance is to be conducted in support of the Department of Defense, with the primary place of performance located in Bremerton, Washington, with a zip code of 98314-6001. The opportunity is structured as a subcontract under NAICS code 541611, indicating it falls under management, scientific, and technical consulting services. The solicitation was posted on July 21, 2026, and responses are due by August 3, 2026. The entity seeking this service is the Puget Sound organization under the Department of Defense, and the work will focus on achieving and maintaining compliance with federal cybersecurity mandates for controlled unclassified information.