Cybersecurity Compliance (NIST SP 800-171)

The contract requires strict adherence to NIST SP 800-171 standards to protect Controlled Unclassified Information within all digital systems used to perform contractual obligations. This includes the development and maintenance of a System Security Plan that documents cybersecurity controls and procedures aligned with the framework, ensuring the secure handling, storage, and transmission of sensitive data. The contractor must be fully prepared for Department of Defense assessments, demonstrating compliance through verifiable documentation, implemented controls, and operational readiness to undergo formal evaluations. All work under this subcontract is to be performed at the designated location in Suffolk, Virginia, with the North American Industry Classification System code 541519 indicating it pertains to other computer-related services. The opportunity is open for responses until August 6, 2026, and is issued by the Department of Defense through the Maritime Supply Chain ESOC Buys office. Compliance is mandatory and non-negotiable, with failure to meet NIST SP 800-171 requirements potentially resulting in non-performance or termination of the contract.