Cybersecurity and CUI Compliance Support

The contract requires comprehensive cybersecurity support to ensure full compliance with NIST SP 800-171 and CMMC Level 2 standards for all systems handling Controlled Unclassified Information. This includes implementing and maintaining the required security controls, conducting ongoing assessments, and ensuring continuous compliance through documentation and audit readiness. The contractor must establish and sustain processes for timely incident reporting in accordance with federal requirements and maintain an up-to-date Supplier Performance Risk System score to reflect the organization’s cybersecurity posture. The subcontract is issued under NAICS code 541512 for computer systems design services and is managed by the Department of Defense through the Navsup Weapon Systems Support Mech. The response deadline is May 8, 2026, and performance is expected to support DoD operational systems where CUI is processed, stored, or transmitted. All activities must align with federal cybersecurity frameworks and demonstrate verifiable adherence to the required control baselines, with emphasis on continuous monitoring, documentation integrity, and readiness for third-party assessments.