Cybersecurity & CUI Compliance Support

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information across all applicable systems and environments. The scope includes full compliance with the security requirements outlined in the standard, covering access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, security assessment, system and communications protection, and system and information integrity. In addition to technical implementation, the contract mandates prompt cyber incident reporting in accordance with federal guidelines and the establishment of audit-ready documentation and processes to support periodic assessments by government auditors. The work is structured as a subcontract under the Department of Defense, with the prime contractor responsible for ensuring alignment with maritime supply chain security objectives. All activities must be completed by the response deadline of July 2, 2026, and performance will be evaluated based on adherence to NIST standards, timeliness of incident reporting, and readiness for audit validation.