Cybersecurity and CUI Compliance Support

The contract seeks comprehensive cybersecurity and Controlled Unclassified Information (CUI) compliance support to ensure adherence to the Cybersecurity Maturity Model Certification (CMMC) framework and NIST SP 800-171 requirements. Key responsibilities include managing the Supplier Performance Risk System (SPRS) reporting, maintaining and updating Plan of Action and Milestones (POAM) for identified security deficiencies, and ensuring that all subcontractors are properly flowed down with applicable CMMC and NIST controls. All digital records must be maintained in full compliance with NIST SP 800-171 standards to safeguard CUI throughout the supply chain. The effort is focused on a defense-related operational environment located in Sasebo, Japan, with performance under the Department of Defense via the Naval Supply Systems Command Fleet Logistics Center Yokosuka. The solicitation is issued as a subcontract under NAICS code 541512, which pertains to computer systems design services, with a response deadline of July 17, 2026. Although no set-aside designation is specified, the contract is open to eligible subcontractors capable of delivering certified cybersecurity compliance services. The requirement emphasizes real-time monitoring, documentation integrity, and continuous alignment with federal cybersecurity standards, requiring the contractor to maintain a robust compliance posture under strict DoD oversight. There is no designated point of contact listed, and all submissions must be processed through the SAM.gov portal to be considered.