Cybersecurity Compliance and CUI Protection (IT Support)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 Rev 2 security controls across all systems that handle Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards for protecting sensitive data. This includes establishing technical, administrative, and physical safeguards to mitigate risks and enforce data integrity, confidentiality, and availability in alignment with DoD requirements. All cyber incidents involving CUI must be reported promptly through the designated DoD portal at dibnet.dod.mil, and only DoD-approved digital certificates may be used for authentication, encryption, and secure communications to guarantee trusted identity and secure data exchange. The work is scoped as a subcontract under the NAICS code 541512 for IT support services and is issued by the Naval Supply Systems Command Weapon Systems Support. Responses are due by May 15, 2026, at 8:30 PM, with the contract opportunity posted on May 7, 2026. Performance is expected to occur within the Department of Defense’s operational environment, though no specific location is provided. Compliance with all specified controls and reporting protocols is mandatory, and any failure to meet these requirements could result in noncompliance penalties or contract termination. The use of authorized credentials and rigorous incident response procedures are critical to maintaining readiness and adherence to national defense cybersecurity policies.