Cybersecurity and CUI Safeguarding (IT & Systems Compliance)

This contract mandates the implementation of comprehensive cybersecurity controls to safeguard Federal Contract Information and Controlled Unclassified Information in alignment with CMMC Level 2 requirements and NIST SP 800-171 standards. The scope focuses on ensuring robust technical, administrative, and physical safeguards across IT and systems infrastructure to meet federal compliance mandates, with an emphasis on protecting sensitive data handled by the prime contractor. Performance must be executed at the designated location in Newport, Rhode Island, with strict adherence to timelines and documented compliance procedures. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses qualify to respond, and it is governed by the NAICS code 541512 for custom computer programming services. The solicitation was posted on July 23, 2026, with a firm deadline for responses on August 6, 2026, and is managed by the Naval Undersea Warfare Center Division Newport within the Department of Defense. Successful bidders must demonstrate proven capability in deploying and maintaining CMMC Level 2 controls, including access control, audit and accountability, configuration management, incident response, and system and communications protection, while maintaining continuous compliance documentation throughout contract performance.