CMMC and Controlled Unclassified Information (CUI) Safeguarding

This contract involves implementing Cybersecurity Maturity Model Certification (CMMC) Level 1 and Level 2 controls to safeguard Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) in accordance with Department of Defense requirements. The contractor is responsible for conducting a Supplier Performance Risk System (SPRS) self-assessment and ensuring that any subcontractors adhere to the mandated cybersecurity standards. The work is to be performed at Joint Base Pearl Harbor-Hickam (JBPHH), under the Pearl Harbor Naval Shipyard Industrial Manufacturing Facility (IMF). This opportunity is designated as a Total Small Business Set-Aside under FAR 19.5, with NAICS code 541512, which covers computer systems design services. The contract was posted on June 5, 2026, with a response deadline of June 8, 2026. The focus is on protecting sensitive information through appropriate controls and compliance measures, emphasizing the security of defense-related data and maintaining assurance regarding subcontractor compliance within the Department of Defense supply chain.