Cybersecurity & CUI Safeguarding Support

The contract requires the implementation and documentation of NIST SP 800-171 controls to protect Covered Defense Information (CUI) across systems and processes, ensuring compliance with federal cybersecurity standards for defense contractors. This includes developing a comprehensive System Security Plan (SSP) that details how each control is implemented, maintained, and monitored, as well as establishing procedures for timely cyber incident reporting in accordance with required protocols. The effort is focused on safeguarding sensitive information within the Department of Defense’s maritime supply chain environment, with performance centered at Fort Eustis, Virginia. Work under this subcontract must be completed by the response deadline of July 23, 2026, and aligns with NAICS code 541512 for computer systems design services. The contractor is expected to possess expertise in cybersecurity frameworks, CUI handling, and DoD procurement requirements, with all deliverables geared toward achieving and sustaining compliance. The scope does not include set-aside provisions and is intended for qualified entities capable of delivering robust, auditable documentation and incident response capabilities to support the Maritime Supply Chain’s security posture.