Cybersecurity and CUI Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls in accordance with NIST SP 800-171 Revision 2, focusing specifically on protecting Controlled Unclassified Information (CUI). It encompasses key responsibilities such as applying the prescribed security measures, ensuring timely incident reporting, and mandating the flowdown of these requirements to any subcontractors involved, thereby maintaining compliance throughout the supply chain. This is a subcontract opportunity set aside exclusively for small businesses, aligned with NAICS code 541512, and is being issued by the Department of Defense through the Naval Supply Systems Command Weapon Systems Support Mechanical division. The solicitation was posted on May 7, 2026, with a response deadline of June 5, 2026. While specific location details are not provided, the contract targets organizations capable of meeting federal cybersecurity standards to support defense-related activities involving sensitive but unclassified data.