Cybersecurity and CUI Compliance Support

The contract requires the implementation and maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for the protection of controlled unclassified information. This includes establishing, monitoring, and sustaining technical and administrative safeguards to prevent unauthorized access, disclosure, or compromise of sensitive data, as well as reporting any cyber incidents promptly in accordance with prescribed government requirements. The contractor must also ensure that all subcontractors handling covered defense information are bound by equivalent cybersecurity obligations through appropriate flow-down clauses, maintaining end-to-end compliance across the supply chain. The work is contracted under the Department of Defense through the Maritime Supply Chain organization, with performance expected to occur in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and is classified as a subcontract, though no set-aside type is designated. Proposals must be submitted by August 14, 2026, following the posting date of August 3, 2026, with all technical and compliance obligations centered on aligning with the NIST framework and maintaining audit-ready documentation throughout the contract term.