Cybersecurity Compliance & CUI Safeguarding

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) associated with design, testing, or production data. The contractor must establish and maintain a robust cybersecurity framework aligned with NIST standards to ensure the confidentiality, integrity, and availability of CUI throughout its lifecycle. This includes configuring systems, defining policies and procedures, training personnel, and applying technical safeguards that meet the specific requirements outlined in NIST SP 800-171. In addition to implementation, the contractor is responsible for conducting a comprehensive self-assessment of compliance with all applicable controls and submitting a formal reporting package that demonstrates adherence to federal cybersecurity requirements. The effort is classified as a subcontract under the Department of Defense’s Maritime Supply Chain, with the North American Industry Classification System code 541512, indicating it involves computer systems design services. All work must be completed by the response deadline of August 6, 2026, and performance is expected to occur within the broader scope of DoD operations, though no specific location is designated.