Cybersecurity Compliance Support (NIST SP 800-171)

The contract calls for the implementation and assessment of NIST SP 800-171 security controls to safeguard covered defense information on contractor systems, ensuring compliance with federal cybersecurity requirements for protected information. This subcontract is issued under the Department of Defense through the Maritime Supply Chain office and requires the awardee to systematically apply, document, and validate controls aligned with NIST’s framework for protecting controlled unclassified information within nonfederal systems. The effort involves a full lifecycle approach including initial gap analysis, control implementation, internal assessment, and preparation for external evaluation to demonstrate compliance. The solicitation was posted on July 30, 2026, with a firm response deadline of August 10, 2026, and is classified under NAICS code 541512 for computer systems design services. There is no set-aside designation specified, indicating the opportunity is open to all eligible contractors. The place of performance and point of contact information are not provided, suggesting flexibility in execution location and the need for proposers to engage directly via the DIBBS portal for further details. Successful bidders must possess demonstrated expertise in NIST 800-171 implementation, experience with DoD cybersecurity expectations, and the capability to deliver verifiable documentation of compliance in a timely manner.