Cybersecurity and CUI Safeguarding (NIST SP 800-171 Compliance)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information and ensure compliance with cyber incident reporting obligations. The work is specifically focused on safeguarding controlled unclassified information within the contractor’s systems and processes, aligning with federal cybersecurity standards mandated for defense contractors. The effort involves establishing, validating, and sustaining technical and administrative controls to mitigate risks associated with unauthorized access, data breaches, and cyber threats. The contract is structured as a small business set-aside under the SBA program, reserved exclusively for total small businesses, and falls under NAICS code 541512 for computer systems design services. Performance is expected to take place in New Cumberland, Pennsylvania, with a response deadline of August 3, 2026, and the opportunity was posted on July 21, 2026. The award will be made through the Department of Defense’s Maritime Supply Chain office, and the contractor must be prepared to demonstrate full compliance with NIST SP 800-171 requirements, including continuous monitoring, documentation, and timely incident reporting as part of their operational obligations.