Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation, documentation, and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information and ensure readiness for Department of Defense assessments. This effort is critical to meeting federal standards for protecting sensitive data within the defense supply chain and includes establishing policies, procedures, and technical safeguards that fully comply with the specified framework. The work must demonstrate continuous adherence to the controls and be prepared for audit or evaluation by the DOD to verify compliance and readiness. This is a subcontract designated as a Total Small Business Set-Aside under the SBA program, meaning only small businesses can compete for and be awarded the contract. It falls under NAICS code 541512 for Computer Systems Design Services and is issued by the Maritime Supply Chain organization within the Department of Defense. The solicitation was posted on July 23, 2026, with a response deadline of July 28, 2026, indicating a tight timeline for submissions. While specific location details are not provided, performance is expected to support DOD requirements, likely involving remote or hybrid work arrangements with alignment to federal cybersecurity mandates.