Cybersecurity Compliance (NIST SP 800-171)

The contract requires support for achieving and maintaining NIST SP 800-171 compliance to safeguard controlled unclassified information, with specific responsibilities including the development and management of a System Security Plan and a Plan of Action and Milestones if CUI is processed, stored, or transmitted. Compliance efforts must align with Department of Defense standards, ensuring all technical, operational, and administrative safeguards are implemented to protect sensitive data across the organization’s systems. The work is scoped under a subcontract and must be performed at Camp Lejeune, North Carolina, with a strict deadline for response by July 27, 2026, and is categorized under NAICS code 541612 for management consulting services. The contracting activity is managed by the Maritime Supply Chain under the Department of Defense, emphasizing the need for rigorous cybersecurity practices aligned with federal mandates for handling unclassified but sensitive information.