Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation, assessment, and documentation of cybersecurity controls outlined in NIST SP 800-171 for systems that handle Controlled Unclassified Information, ensuring alignment with federal standards for protecting sensitive but unclassified data. The work involves a thorough evaluation of existing security postures, deployment of required controls, and the creation of a Plan of Action and Milestones to address any deficiencies identified during the assessment process. All activities must be meticulously documented to demonstrate compliance and support audit readiness. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain ESOC Buys office, with performance expected to take place in Jacksonville, Florida, at the designated zip code 32226-3404. It is solicited under NAICS code 541612, indicating the focus on computer systems design and related services, and the response deadline is August 17, 2026. The solicitation is available through the DIBBS platform, and while no specific set-aside status or point of contact is provided, the emphasis is on delivering a fully compliant and auditable cybersecurity framework aligned with NIST guidelines.