Cybersecurity & Compliance Engineering

The contract requires the implementation of NIST SP 800-171 security controls to protect controlled unclassified information across systems, along with comprehensive Risk Management Framework documentation to ensure ongoing compliance and audit readiness. It includes active vulnerability management services to identify, assess, prioritize, and remediate security weaknesses in a timely manner, as well as support for an insider threat program designed to detect, deter, and respond to potential threats originating from within the organization. All work must be performed in support of CUI systems under the oversight of the Commander Navy Installations Command, with the place of performance located in Millington, Tennessee, at the specified ZIP code. The opportunity is structured as a subcontract under NAICS code 541512, and responses must be submitted by August 31, 2026, with the solicitation posted on July 31, 2026.