Cybersecurity Compliance (NIST SP 800-171) Assessment and Implementation

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within contractor systems, ensuring full compliance with DFARS regulatory requirements. This involves establishing robust cybersecurity practices across all relevant systems to protect CUI from unauthorized access, disclosure, or modification, with a focus on meeting federal standards for information security in the defense supply chain. The work is solicited as a subcontract under the NAICS code 541512 for computer systems design services and is tied to the Department of Defense through the Maritime Supply Chain ESOC Buys office. Performance must occur in Yakima, Washington, with a response deadline of August 3, 2026. Contractors must demonstrate the ability to assess current security postures, implement missing controls, and provide evidence of compliance through documented procedures and audit-ready documentation. Failure to meet NIST SP 800-171 requirements will result in non-compliance with federal contracting obligations.