Cybersecurity Compliance Support (NIST SP 800-171)

This contract provides cybersecurity compliance support aligned with DFARS 252.240-7997, requiring the implementation of NIST SP 800-171 controls to protect covered contractor information systems from unauthorized access. The work encompasses a full lifecycle of compliance activities including assessment of current security posture, detailed documentation of policies and procedures, and the deployment of safeguards to ensure the confidentiality, integrity, and availability of sensitive information. All tasks must be performed in accordance with federal cybersecurity requirements applicable to defense contractors handling controlled unclassified information. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain ESOC Buys organization, with performance required at a designated location in Suffolk, Virginia, 23435-5000. The NAICS code 541611 indicates the work falls under Management, Scientific, and Technical Consulting Services, reflecting a professional services engagement. The solicitation was posted on July 26, 2026, with a firm deadline for responses on August 6, 2026, and is accessible through the DIBBS platform. Contractors must demonstrate proven capability in executing NIST 800-171 compliance efforts and meeting strict DoD cybersecurity standards.