NIST SP 800-171 Compliance & CMMC Support

The contract requires the implementation and assessment of NIST SP 800-171 controls to protect covered defense information and to support documentation required for the Cybersecurity Maturity Model Certification framework. The work is scoped to ensure compliance with federal cybersecurity standards for handling sensitive government data, with a focus on achieving the necessary maturity levels for CMMC accreditation. The contractor must have the technical expertise to evaluate existing systems, identify gaps in security controls, and execute remediation plans aligned with NIST guidelines while generating the audit-ready documentation required for certification. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside program, designated under NAICS code 541512 for Computer Systems Design Services. The opportunity was posted on August 2, 2026, with proposals due by August 17, 2026. The work supports the Department of Defense through its Maritime Supply Chain office, with performance expected to occur within the agency’s operational areas. The contractor must be prepared to meet stringent cybersecurity requirements and deliver both technical implementation and compliance reporting in alignment with federal defense standards.