NIST SP 800-171 Cybersecurity Compliance Assessment and Remediation

This contract involves conducting a cybersecurity assessment focused on ensuring compliance with the NIST SP 800-171 standards for handling Controlled Unclassified Information (CUI). The primary objective is to evaluate the current cybersecurity measures in place and identify any deficiencies in protecting sensitive information as outlined by federal guidelines. If any gaps or vulnerabilities are discovered during the assessment, the contractor is also responsible for developing a detailed Plan of Action and Milestones (POA&M) to address and remediate these issues, ensuring full compliance. Issued by the Department of Defense's Maritime Supply Chain office, the work is to be performed in New Cumberland, with a subcontract opportunity described under NAICS code 541611, which corresponds to administrative management and general management consulting services. The solicitation was posted on May 22, 2026, and responses are due by May 28, 2026. This contract is critical for maintaining the security integrity of sensitive defense-related information and ensuring adherence to federal cybersecurity standards.