Cybersecurity & CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all relevant systems and operations. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of sensitive data handled under the agreement. Contractors must establish and document a robust cybersecurity posture aligned with the NIST framework, including access control, audit logging, configuration management, and risk assessment practices. All systems handling CUI must be continuously monitored for compliance, and any detected cyber incident must be reported to the appropriate authorities within 72 hours of discovery, with full documentation and incident response actions provided as required. The contract is classified as a subcontract under the NAICS code 541512, associated with the Department of Defense’s Maritime Supply Chain ESOC Buy’s initiative, with performance obligated at the location in Suffolk, Virginia, ZIP 23435-5000. Proposals must be submitted by the deadline of August 6, 2026, and the solicitation is accessible through the DIBBS platform. No specific set-aside status is indicated, and all interested parties must demonstrate proven capability in NIST 800-171 implementation and cyber incident reporting procedures to be considered for award.