Cybersecurity Compliance (NIST SP 800-171) Assessment Provider

The contract requires a subcontractor to conduct a cybersecurity assessment of the prime contractor’s controls to verify compliance with NIST Special Publication 800-171, specifically focused on safeguarding Covered Defense Information within the Department of Defense environment. The assessment must evaluate the adequacy and implementation of security requirements designed to protect sensitive data, ensuring alignment with federal standards for non-federal systems handling controlled unclassified information. This activity is critical for maintaining the integrity and confidentiality of defense-related data and supporting the broader defense industrial base’s cybersecurity posture. The opportunity is designated as a Total Small Business Set-Aside under the SBA program, exclusively available to small businesses as defined by the North American Industry Classification System code 541512, which pertains to computer systems design and related services. The solicitation was posted on June 24, 2026, with a response deadline of July 6, 2026, and the performance site is located in Silverdale, Washington, with a zip code of 98315-7000. The contract type is a subcontract, indicating the selected provider will work under the prime contractor to fulfill the assessment requirements mandated by the Department of Defense's Construction & Equipment MRO SVC I office.