Cybersecurity Compliance and CUI Safeguarding

This contract requires the implementation and ongoing maintenance of cybersecurity controls as outlined in NIST SP 800-171 Rev 2 to protect Controlled Unclassified Information across all subcontractor operations. The work is focused on ensuring compliance with federal standards for safeguarding sensitive data within the Department of Defense supply chain, specifically under the purview of DLA Maritime - Puget Sound. Performance is expected to occur in Bremerton, Washington, and all activities must align with the technical and procedural requirements of the NIST framework to mitigate risks associated with CUI exposure, storage, processing, and transmission. The contract is a small business set-aside under the SBA’s Total Small Business Set-Aside program, meaning only small business concerns are eligible to bid, and the North American Industry Classification System code is 541512, indicating the work falls under computer systems design and related services. The solicitation was posted on July 2, 2026, with proposals due by July 7, 2026, at 5:00 p.m. EST. Compliance is non-negotiable, and failure to implement or maintain the required controls could result in contract termination or penalties. The subcontractor assumes full responsibility for securing CUI throughout their systems, networks, and personnel practices, ensuring continuous alignment with federal cybersecurity mandates.