Cybersecurity and CUI Compliance Support

The contract requires comprehensive cybersecurity support to ensure compliance with NIST SP 800-171 standards for systems handling Controlled Unclassified Information, including full implementation of required security controls, development of a detailed System Security Plan, and ongoing maintenance of the Plan of Action and Milestones to address identified gaps. It also includes active support for achieving CMMC Level 2 self-assessment certification, ensuring that all technical, operational, and managerial controls are properly documented, tested, and aligned with defense cybersecurity requirements. The effort is targeted at organizations supporting the Department of Defense’s Maritime Supply Chain program and must be completed within a five-day response window following the solicitation’s posting date. This subcontract is classified under NAICS code 541512 for computer systems design services, and work must be performed in alignment with federal cybersecurity frameworks to safeguard sensitive unclassified information across the defense industrial base.