Cybersecurity Compliance & CUI Protection

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard covered defense information handled by the subcontractor, ensuring compliance with DFARS 252.204-7012. This includes establishing robust technical, administrative, and physical security measures to protect controlled unclassified information, as well as maintaining audit readiness at all times. The subcontractor must also establish and operate an incident reporting protocol to promptly notify the government of any cybersecurity breaches or anomalies involving controlled defense information. This is a subcontract under the Department of Defense’s Maritime Supply Chain initiative, with a NAICS code of 541512 for computer systems design and related services. The solicitation is open for responses until August 3, 2026, and performance is expected to align with federal cybersecurity standards without geographic restrictions. All activities must be conducted in strict adherence to DoD requirements, with a focus on continuous compliance, documentation of control implementation, and the ability to demonstrate auditability through verifiable records and processes.