IT Security Compliance (NIST SP 800-171)

The contract requires implementation and documentation of compliance with NIST SP 800-171 standards to protect controlled unclassified information within the maritime supply chain environment. This includes establishing security controls, conducting a thorough assessment of current systems and processes, and developing a Plan of Action and Milestones to address any gaps in compliance. The effort is focused on ensuring that all CUI is properly safeguarded in accordance with federal requirements, with particular emphasis on secure handling, access controls, and audit capabilities. The work must be delivered to meet the deadline of August 10, 2026, with performance centered at Jacksonville, Florida, under a subcontract arrangement. The contract falls under NAICS code 541512, indicating it involves computer systems design and related services, and is managed by the Department of Defense through the Maritime Supply Chain organization. Although no set-aside designation is specified, the solicitation is targeted toward qualified subcontractors capable of delivering NIST-compliant security solutions in a federal context. Documentation must be thorough and verifiable, supporting continuous monitoring and readiness for audits. The project timeline is tight, with proposals due just over two weeks after the posting date, demanding prompt mobilization and existing familiarity with NIST SP 800-171 frameworks.