NIST SP 800-171 Compliance and Cybersecurity Support

The contract requires the implementation, ongoing maintenance, and assessment of security controls outlined in NIST SP 800-171 to safeguard Controlled Unclassified Information within contractor systems. This includes ensuring all applicable controls are properly configured, monitored, and documented to meet federal cybersecurity standards for protecting CUI. The contractor must also ensure these requirements are effectively flowed down to all subcontractors, maintaining end-to-end compliance across the supply chain. Regular assessments will be necessary to verify adherence and identify gaps or vulnerabilities that could compromise the integrity, confidentiality, or availability of sensitive information. This is a subcontract under the Department of Defense, specifically managed by the MARITIME SUPPLY CHAIN ESOC BUYS, with a NAICS code of 541512 indicating it relates to computer systems design and related services. The solicitation was posted on April 24, 2026, and responses are due by May 8, 2026. The work will be performed in support of government operations, with no specific location designated for performance. Compliance is non-negotiable, and failure to meet NIST SP 800-171 requirements may result in contract termination or loss of eligibility for future work involving CUI.