Cybersecurity and CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls across all systems handling Covered Defense Information, ensuring full alignment with DFARS 252.204-7012 requirements. This includes conducting self-assessments to verify compliance, developing and maintaining Plans of Action and Milestones to remediate identified gaps, and establishing robust incident reporting procedures to promptly notify applicable authorities of security breaches or anomalies. All activities must be formally documented and maintained to demonstrate continued adherence to federal cybersecurity standards for protecting controlled unclassified information. The work is scoped under a subcontract classified under NAICS code 541512 and is tied to the Department of Defense via the Maritime Supply Chain agency, with performance required at a designated location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, indicating a narrow window for proposal submission. Contractors must be prepared to demonstrate expertise in NIST 800-171 frameworks, experience with DFARS compliance, and the capability to operate securely within a defense supply chain environment, ensuring all systems are properly secured, monitored, and reported on in accordance with federal cybersecurity mandates.