Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information across all applicable systems and processes. This includes the development and continuous update of a System Security Plan and a Plan of Action and Milestones to document compliance gaps and remediation efforts. The contractor must establish robust procedures for timely cyber incident reporting in accordance with federal requirements and ensure all activities align with the NIST framework to maintain the integrity, confidentiality, and availability of CUI. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside program, with a NAICS code of 541512 for Computer Systems Design Services, issued by the Department of Defense under the Maritime Supply Chain organization. The solicitation was posted on August 4, 2026, with a response deadline of August 19, 2026, and is accessible through the DIBBS platform. Performance is expected to support DoD-specific cybersecurity obligations, with no specific geographic location designated for place of performance.