Cybersecurity and CUI Compliance Support

The contract provides ongoing cybersecurity compliance support to ensure adherence to NIST SP 800-171 Rev. 2 and CMMC Level 2 requirements for systems handling federal contract information and controlled unclassified information. The scope includes continuous monitoring, documentation, policy enforcement, and incident reporting processes necessary to maintain compliance throughout the lifecycle of covered systems, with a focus on meeting federal standards for data protection and risk management. Work will be performed in support of the Department of Defense under the Navsup Weapon Systems Support Mech, specifically targeting systems that process, store, or transmit sensitive defense-related data. This subcontract is classified under NAICS code 541512 for computer systems design services and is open for response until August 1, 2026. There is no set-aside designation specified, and performance location details are not provided. The contractor is expected to deliver a sustained, proactive compliance posture, including timely response to security incidents, audits, and any evolving regulatory changes within the NIST and CMMC frameworks. The contract emphasizes operational readiness and documentation rigor to ensure uninterrupted eligibility for DoD contracts requiring controlled unclassified information handling.