Cybersecurity Compliance (CMMC/NIST SP 800-171)

The contract requires support for achieving and maintaining compliance with NIST SP 800-171 standards and preparing for CMMC Level 2 self-assessment to properly handle Controlled Unclassified Information in alignment with DFARS requirements. This effort is critical for ensuring robust cybersecurity controls are implemented across systems and processes that process, store, or transmit CUI, with the goal of meeting Department of Defense expectations for safeguarding sensitive data. The work involves documenting policies, conducting gap assessments, implementing technical and administrative safeguards, and compiling evidence to demonstrate readiness for certification. This is a small business set-aside subcontract under NAICS code 541512, managed by the Maritime Supply Chain office within the Department of Defense. The solicitation was posted on July 20, 2026, with a response deadline of August 4, 2026, indicating a tight timeline for qualification and submission. The place of performance and point of contact details are not provided, suggesting work may be performed remotely or at the contractor's facility, with oversight tied to CUI handling protocols. All activities must satisfy federal cybersecurity mandates without reliance on external certification bodies, as the scope is centered on self-assessment and internal compliance readiness.