Cybersecurity & CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with federal cybersecurity standards. This includes the development of a System Security Plan that documents how the contractor will meet all required controls, as well as the establishment of processes for timely cyber incident reporting in accordance with prescribed protocols. The work is scoped as a subcontract under a Total Small Business Set-Aside, meaning only small businesses certified by the SBA are eligible to respond, and the project falls under NAICS code 541512 for computer systems design services. The performance location is unspecified but will be tied to the Department of Defense’s Maritime Supply Chain organization. Proposals must be submitted by the deadline of August 19, 2026, with the solicitation published on August 4, 2026, through the DIBBS system for defense contracting opportunities.