Cybersecurity and CUI Compliance Support

The contract seeks support for implementing NIST SP 800-171 controls to ensure the protection of controlled unclassified information within covered defense systems. Providers must establish, maintain, and validate compliance with all required cybersecurity safeguards to securely store, process, and transmit sensitive government data. This includes conducting internal assessments, applying technical and administrative controls, and ensuring workforce training aligns with federal cybersecurity standards for safeguarding covered defense information. Additionally, the contractor is obligated to report any cybersecurity incidents promptly and in accordance with prescribed government protocols, including timely notification, containment, and documentation of breaches or attempted breaches. Performance is expected to meet the stringent requirements of the Department of Defense under the NAICS code 541512, and the subcontract is intended for execution in support of Naval Facilities Engineering Systems Command Southwest. Responses are due by April 29, 2026, with no set-aside classification specified, and all work must align with federal mandates for information security and incident response.