Cybersecurity Compliance (NIST SP 800-171)

The contract seeks support for a prime contractor to achieve and maintain compliance with NIST SP 800-171 for the handling of controlled unclassified information, focusing on implementing required cybersecurity controls and conducting thorough self-assessments. The scope includes developing and managing a Plan of Action and Milestones to address identified gaps and ensure continuous adherence to federal cybersecurity standards, with the ultimate goal of protecting CUI across systems and operations. This effort is critical for sustaining authorization to handle sensitive government data under DoD requirements. The work is categorized as a subcontract under NAICS code 541512 and is tied to the Maritime Supply Chain program within the Department of Defense, with performance specifically required in San Diego, California at ZIP code 92136-3581. The solicitation was posted on July 15, 2026, with responses due by July 27, 2026, indicating a focused timeframe for proposal submission and selection. The contract does not specify a set-aside classification and is available to qualified subcontractors capable of delivering NIST 800-171 compliance services, including assessment documentation, remediation planning, and ongoing monitoring to meet federal cybersecurity obligations.