Cybersecurity and CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST Special Publication 800-171 to safeguard Covered Defense Information hosted on contractor systems. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data related to defense operations, and must be performed in full compliance with federal cybersecurity standards. The contractor must establish, document, and continuously enforce policies and technical measures aligned with the 110 security controls outlined in the publication, covering areas such as access control, audit logging, media protection, incident response, and system and communications protection. The work is issued as a subcontract under the Department of Defense’s Maritime Supply Chain office, with a North American Industry Classification System code of 541512, indicating it falls under computer systems design and related services. The solicitation was posted on July 22, 2026, and bids must be submitted by August 6, 2026. The place of performance and specific office address details are not provided, suggesting work may be performed remotely or at multiple locations. Contractors must be prepared to demonstrate compliance through documentation, audits, and potential assessments, and all activities must be completed without relying on proprietary or classified infrastructure outside the scope of approved defense cybersecurity protocols.