NIST SP 800-171 Cybersecurity Compliance Support

The contract requires support to a prime contractor in achieving and documenting compliance with NIST SP 800-171 standards for the protection of Controlled Unclassified Information, as mandated by DFARS clauses. This effort centers on implementing and verifying cybersecurity controls necessary to safeguard CUI within the prime contractor’s information systems, ensuring alignment with federal requirements for handling sensitive but unclassified data. The work involves assessing current security postures, identifying gaps, developing remediation plans, preparing documentation, and facilitating audits or assessments to validate full compliance. This is a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain organization, with performance required at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation falls under NAICS code 541512 for Computer Systems Design Services and was posted on July 26, 2026, with a response deadline of August 6, 2026. The nature of the work demands expertise in federal cybersecurity frameworks and the ability to translate technical requirements into actionable, audit-ready documentation, supporting the prime contractor's obligations under defense contracting regulations without direct oversight from the government.