CUI Security & Compliance Management

The contract requires the implementation and ongoing management of security controls to protect Controlled Unclassified Information in full alignment with Department of Defense Instruction 5200.48 and NIST Special Publication 800-171. This includes establishing, maintaining, and auditing technical, administrative, and physical safeguards to ensure CUI confidentiality, integrity, and availability across all covered systems. The work demands rigorous compliance with all applicable NIST requirements, including system configuration, access control, audit logging, incident response, and continuous monitoring, alongside the development and delivery of mandatory security awareness training for all personnel handling CUI. The contract is a subcontract under the Nswc Philadelphia Division, part of the Department of Defense, with performance centered in Philadelphia, Pennsylvania, specifically at the 19112 zip code area. The solicitation was posted on June 17, 2026, with proposals due by June 24, 2026, and falls under NAICS code 541512 for computer systems design services. The successful offeror must demonstrate proven experience in CUI security frameworks, have the capability to implement and validate controls in real-time environments, and be prepared to support periodic assessments and reporting to ensure sustained compliance throughout the contract duration.