CUI Handling & IT Security Compliance

The contract entails the implementation and ongoing maintenance of NIST SP 800-171 security controls specifically designed for handling Controlled Unclassified Information (CUI). This includes activities such as system hardening, enforcing access controls, audit logging, and ensuring CUI destruction is carried out using NSA-approved techniques. The scope focuses on ensuring IT security compliance consistent with Department of Defense standards to protect sensitive information. Issued by the Naval Surface Warfare Center Philadelphia Division, this subcontract opportunity involves work to be performed in Philadelphia with the primary objective of safeguarding CUI in accordance with federal cybersecurity requirements. The solicitation was posted on May 4, 2026, and responses are due by May 21, 2026. The contract falls under NAICS code 541690, which pertains to other scientific and technical consulting services, highlighting the technical and compliance-oriented nature of the work.