Cybersecurity and CUI Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 Revision 2 security controls to safeguard Controlled Unclassified Information across all systems and processes. Compliance includes establishing robust policies for incident detection, reporting, and response, as well as ensuring that all subcontractors and lower-tier vendors adhere to the same requirements through mandatory flowdown clauses. The effort is focused on protecting CUI throughout the supply chain and maintaining continuous alignment with federal cybersecurity standards. This is a total small business set-aside solicitation under the SBA program, classified under NAICS code 541512 for computer systems design services, and issued by the Department of Defense through Navsup Weapon Systems Support Mech. The opportunity was posted on May 7, 2026, with proposals due by June 5, 2026. While no specific location is provided, performance is expected to support defense-related cybersecurity obligations, and the award will be restricted to small business concerns qualifying under the set-aside criteria.