Cybersecurity Compliance Support (NIST SP 800-171)

This contract supports the implementation and documentation of NIST SP 800-171 controls to safeguard Covered Defense Information within the contractor’s systems, requiring full compliance with federal cybersecurity standards for sensitive unclassified information. The scope includes conducting system assessments to verify control effectiveness, maintaining detailed documentation of security practices, and establishing processes for timely incident reporting to meet defense security requirements. All work must align with the NIST framework and ensure that the contractor’s environment meets the stringent protection mandates for Defense Department data. Awarded as a Small Business Set-Aside under FAR 19.5, the contract is targeted exclusively at small businesses and falls under NAICS code 541611 for management consulting services. Performance is centered in Newport, with the contracting activity led by the Naval Undersea Warfare Center Division Newport under the Department of Defense. The solicitation was posted on June 25, 2026, with proposals due by July 2, 2026, at 6:00 PM, and the selected subcontractor will be responsible for end-to-end cybersecurity compliance support including ongoing monitoring, documentation updates, and response to any security events affecting Covered Defense Information.