Cybersecurity Compliance (NIST SP 800-171 Implementation)

This contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to protect covered defense information hosted on or processed by the contractor’s systems. The work involves conducting systematic assessments to validate compliance with these controls and establishing robust incident reporting protocols to promptly notify the government of any cybersecurity breaches or anomalies. The effort is scoped to ensure the integrity, confidentiality, and availability of sensitive data within the defense supply chain, with a focus on continuous monitoring and remediation of security gaps. All activities must align with federal cybersecurity standards and be executed in accordance with the requirements of the Department of Defense. The contract is designated as a small business set-aside under the SBA’s Total Small Business Set-Aside program, restricted to businesses that meet Small Business Administration size standards. It falls under NAICS code 541512, indicating the work involves computer systems design and related services. Performance is required at a location in San Diego, California, with a ZIP code of 92136-5205. The solicitation was posted on July 19, 2026, and responses are due by July 30, 2026. This is a subcontracting opportunity under the Maritime Supply Chain ESOC Buys organization, and all participants must be prepared to handle classified or controlled unclassified information in compliance with DoD cybersecurity mandates.