Cybersecurity Compliance Support (NIST SP 800-171 Assessment)

The contract provides cybersecurity compliance support focused on achieving NIST SP 800-171 self-assessment, developing a comprehensive System Security Plan, and submitting findings to the Supplier Performance Risk System to fulfill DFARS requirements for handling Controlled Unclassified Information. This work is essential for organizations contracted by the Department of Defense to ensure proper protection of CUI across their information systems. The effort involves conducting gap analyses, implementing required security controls, documenting policies and procedures, and ensuring accurate reporting through the SPRS portal to maintain contractual compliance and mitigate risk. Performed under a subcontract, the scope is tied to a specific performance location in New Cumberland, Pennsylvania, with a tight response window ending on July 31, 2026, following a posting date of July 28, 2026. The NAICS code 541611 indicates this involves management, scientific, and technical consulting services, reflecting the advisory and implementation nature of the support required. The agency, Maritime Supply Chain under the Department of Defense, relies on this engagement to verify that its subcontractors meet federal cybersecurity standards, with full compliance being a non-negotiable condition for continued contract performance.