NIST SP 800-171 Cybersecurity Compliance Assessment & Implementation

The contract requires the provision of cybersecurity compliance services aligned with NIST Special Publication 800-171 Revision 1 to safeguard Controlled Unclassified Information across designated systems and operations. This includes conducting comprehensive self-assessments of current security controls, preparing and submitting System Security Plan Reports to the SPRS database, and developing detailed mitigation plans to address identified gaps and deficiencies. The scope demands full adherence to NIST 800-171 requirements to ensure CUI is properly protected, with deliverables focused on achieving and maintaining compliance through documented processes and remediation efforts. The contract is structured as a subcontract under a Total Small Business Set-Aside designation, exclusively available to small businesses as defined by the SBA, and falls under NAICS code 541512 for Computer Systems Design Services. Performance is located in Kittery, Maine, with a response deadline of July 29, 2026, and the solicitation was posted on July 17, 2026. The procuring entity is DLA Maritime - Portsmouth, operating under the Department of Defense, indicating the work supports defense-related cybersecurity obligations. The nature of the work necessitates technical expertise in federal cybersecurity standards and a proven ability to execute compliance activities accurately and within strict government timelines.