Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with Controlled Unclassified Information (CUI) handling requirements. Key responsibilities include system hardening to reduce vulnerabilities, enforcing strict access controls to limit data exposure, and establishing comprehensive incident response plans to detect, respond to, and recover from cybersecurity threats. The work is scoped as a subcontract under a Total Small Business Set-Aside, meaning only small business concerns are eligible to bid, and it falls under NAICS code 541512 for computer systems design services. The opportunity is sponsored by DLA Maritime - Pearl Harbor under the Department of Defense and is open for submissions until July 2, 2026, with no specific location designated for performance, indicating potential remote or distributed execution. Compliance with federal cybersecurity standards is mandatory, and contractors must demonstrate the ability to continuously monitor and adapt controls to evolving threats while maintaining documentation to prove adherence.