Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect covered defense information, with a primary focus on developing a System Security Plan and achieving readiness for the Cybersecurity Maturity Model Certification. The work is scoped to ensure full compliance with federal cybersecurity requirements for defense contractors, including the documentation, assessment, and continuous improvement of security controls aligned with NIST guidelines. The contractor must demonstrate capability to manage all aspects of cybersecurity compliance, from initial assessment through to certification readiness, and must sustain those efforts throughout the contract term. The contract is structured as a small business set-aside under the SBA program, specifically reserved for total small businesses, and is classified under NAICS code 541611 for management, scientific, and technical consulting services. Performance is required at Quantico, Virginia, with a zip code of 22134. The contract falls under the Department of Defense and is managed by the Commander, indicating a direct link to defense operations requiring stringent information protection standards. While no point of contact is listed, the solicitation is accessible through the SAM.gov platform for further details.