Cybersecurity Compliance Implementation (NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 security controls to ensure compliance with DFARS 252.240-7997, focusing on safeguarding controlled unclassified information within the Maritime Supply Chain’s operational environment. This includes the development of a comprehensive System Security Plan that documents the organization’s security posture, control implementation strategies, and responsibilities, along with the creation of a Plan of Action and Milestones to track remediation efforts for any identified deficiencies. All activities must align with federal cybersecurity standards and be executed under the stringent requirements of a Women-Owned Small Business Set-Aside, ensuring eligibility and adherence to set-aside regulations. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002, and is structured as a subcontract within the Department of Defense’s procurement framework. The solicitation, issued under NAICS code 541512 for Computer Systems Design Services, was posted on July 16, 2026, and responses are due by July 27, 2026. Participation is limited to eligible Women-Owned Small Businesses, and the successful entity must demonstrate proven capability in executing NIST-based cybersecurity compliance projects, with a clear understanding of DoD cyber requirements and the ability to deliver fully documented, auditable security documentation.