Cybersecurity & CUI Safeguarding Support

The contract seeks support for achieving and maintaining NIST SP 800-171 compliance, implementing DFARS 252.204-7012 requirements, and establishing robust cyber incident reporting procedures to safeguard controlled unclassified information within the defense supply chain. The work involves guiding the prime contractor or subcontractor through the full lifecycle of CUI protection, including policy development, security control implementation, internal audits, and timely reporting of cyber incidents as mandated by federal regulations. The goal is to ensure the secure handling of sensitive information across all systems and environments handling such data. This is a small business set-aside subcontract under NAICS code 541512, awarded by the Department of Defense under the Maritime Supply Chain office, with performance required at the designated location in New Cumberland, Pennsylvania, ZIP 17070-5002. Proposals must be submitted by August 3, 2026, and the solicitation is open exclusively to small business concerns as defined by the SBA. The contractor must demonstrate proven expertise in federal cyber compliance frameworks, experience with DoD contractual cybersecurity obligations, and the ability to deliver actionable, audit-ready documentation and training to maintain continuous compliance.