NIST SP 800-171 Compliance and Assessment

The contract requires the implementation and assessment of cybersecurity controls to achieve full compliance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012, ensuring the protection of controlled unclassified information within the contractor’s systems. The work involves a comprehensive evaluation of existing security practices, identification of gaps, and deployment of technical and administrative safeguards aligned with the NIST framework, followed by formal assessment and documentation to demonstrate adherence to federal cybersecurity standards for handling sensitive defense information. This is a small business set-aside subcontract under NAICS code 541611, reserved exclusively for small businesses as defined by the Small Business Administration, and is issued by the Department of Defense under the Maritime Supply Chain office. The solicitation was posted on July 22, 2026, with a submission deadline of August 6, 2026, and performance is expected to support the broader defense supply chain’s cybersecurity posture. Although the specific location of performance is not designated, the contractor must be prepared to meet all federal requirements and provide deliverables that validate compliance through assessment reports and audit-ready documentation.