Cybersecurity & CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in full alignment with NIST SP 800-171 standards and Department of Defense assessment protocols. This effort is critical to ensuring that sensitive but unclassified data remains protected against unauthorized access, disclosure, or compromise across all systems and processes under the subcontractor’s scope of work. Compliance with these controls must be ongoing and verified through regular assessments to meet federal cybersecurity requirements. This is a Total Small Business Set-Aside subcontract under NAICS code 541512, exclusively available to small businesses, and is managed by the Naval Supply Systems Command Fleet Logistics Center Norfolk under the Department of Defense. The opportunity was posted on July 1, 2026, with a firm deadline for responses on July 9, 2026, at 6:00 PM. The place of performance is associated with the ZIP code 20374, indicating the primary operational location for fulfilling the cybersecurity obligations. All work must be performed in accordance with federal acquisition regulations and must demonstrate the ability to sustain a robust, auditable cybersecurity posture tailored to the DoD’s CUI protection mandates.