Cybersecurity & CUI Compliance Support

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information, ensuring alignment with Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 requirements. This includes the development of a comprehensive System Security Plan that documents how security controls are addressed across the organization’s information systems, as well as establishing procedures for timely cyber incident reporting in accordance with federal mandates. Compliance is not optional and must be fully integrated into operational practices to meet the Department of Defense's standards for handling controlled unclassified information. The work is solicited as a subcontract under the Maritime Supply Chain division of the Department of Defense, with performance expected to take place in Tracy, California, 95304-5000. The solicitation, identified by the NAICS code 541512 for computer systems design services, is open for responses until August 5, 2026, with proposals due by 5:00 PM EST on that date. Interested parties must be prepared to demonstrate proven experience in implementing NIST 800-171 controls and managing cyber incident response protocols within a defense contract environment, as adherence to these requirements is critical to contract award and continued compliance.