NIST SP 800-171 Cybersecurity Compliance Support

The contract requires implementation and assessment of NIST Special Publication 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. This includes configuring systems, documenting controls, and conducting internal evaluations to validate adherence to the framework, with a critical emphasis on maintaining continuous compliance and readiness for audit or review. The scope is tightly focused on protecting information as defined by DoD regulations and aligning with the requirements of the Defense Federal Acquisition Regulation Supplement. In addition to control implementation, the contract mandates prompt incident reporting, requiring any cybersecurity event affecting covered defense information to be reported within 72 hours using official Department of Defense channels. This ensures timely response and coordination with federal authorities to mitigate threats and maintain operational security. The work is governed under a subcontract arrangement with a place of performance in Everett, Washington, and falls under NAICS code 541512 for computer systems design services. Responses are due by July 24, 2026, and the solicitation is managed by the Maritime Supply Chain ESOc Buys unit under the Department of Defense.