NIST SP 800-171 Compliance Support for Non-COTS Offerings

This contract focuses on providing cybersecurity compliance support specifically tailored for non-commercial off-the-shelf (non-COTS) contractors. The scope includes the development of System Security Plans (SSP) and Plans of Action and Milestones (POA&M), along with conducting assessments aligned with the requirements of NIST Special Publication 800-171, which governs the protection of controlled unclassified information in non-federal systems. The services aim to ensure that contractors meet the Department of Defense's stringent cybersecurity standards. Issued by the Defense Logistics Agency (DLA) Maritime at Puget Sound, this subcontract is designated as a total small business set-aside, emphasizing opportunities for small business participation under the Federal Acquisition Regulation (FAR 19.5). With a focus on NAICS code 541611, which covers administrative management and general management consulting services, the work will be performed in Bremerton, Washington, with responses due promptly by May 15, 2026. This engagement supports the Department of Defense’s increased emphasis on safeguarding sensitive information within its supply chain by ensuring compliance with NIST SP 800-171 standards.