Cybersecurity and CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information, ensuring compliance with federal cybersecurity standards for handling Controlled Unclassified Information. Performance includes the development and regular update of a System Security Plan and a Plan of Action and Milestones to document control implementation progress and remediation efforts. The contractor must also establish and maintain processes for timely cyber incident reporting in accordance with applicable defense regulations. Work is to be performed at the designated location in APO, ZIP 96543-4052, with the task falling under NAICS code 541512 for computer systems design services. The opportunity is structured as a subcontract with a response deadline of August 14, 2026, and is managed by the Department of Defense under the Maritime Supply Chain ESOC Buys organization.