Cybersecurity Compliance (NIST SP 800-171 Implementation)

This contract requires the implementation and assessment of security controls outlined in NIST Special Publication 800-171 to safeguard covered defense information within systems operated by the subcontractor. The work involves comprehensive system hardening, robust access control measures, and the establishment of procedures for timely cyber incident reporting in alignment with federal requirements. All activities must be performed to ensure strict compliance with the NIST framework, addressing configuration management, identity verification, audit logging, and data protection across the entire information system environment. The contract is issued as a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain division, with a NAICS code of 541512 indicating it relates to computer systems design services. The solicitation was posted on July 22, 2026, and responses are due by August 6, 2026. Performance is expected to be carried out in support of federal defense information systems, though the exact location of performance is not specified. The subcontractor must demonstrate proven capability in deploying and validating NIST 800-171 controls, with an emphasis on maintaining continuous compliance and readiness for audits or assessments by government entities.