Cybersecurity Compliance (NIST SP 800-171) and CMMC Support

The contract requires the implementation, documentation, and ongoing assessment of compliance with NIST SP 800-171 standards to protect covered defense information, alongside comprehensive support for achieving CMMC Level 2 self-assessment readiness. This includes establishing technical and administrative controls aligned with NIST’s cybersecurity framework, maintaining detailed records of control implementation, and conducting internal evaluations to validate compliance posture. The work must ensure that systems and processes meet the rigorous requirements for safeguarding controlled unclassified information as defined by the Department of Defense. Performance is to be executed at Kings Bay, Georgia, with a tight submission window closing just three days after the solicitation was posted, indicating a rapid procurement timeline. The contract is structured as a subcontract under the NAICS code 541618 for other scientific and technical consulting services, and is managed by the Maritime Supply Chain office within the Department of Defense. The goal is to establish a sustainable cybersecurity posture that fulfills both current NIST mandates and prepares the organization for future CMMC audits, with full accountability for documentation and compliance tracking throughout the engagement.