Cybersecurity Compliance and CUI Safeguarding (IT/SPRS Support)

The contract establishes the implementation and ongoing maintenance of NIST SP 800-171 security controls across systems that process, store, or transmit covered defense information, ensuring compliance with federal requirements for safeguarding controlled unclassified information. The vendor is responsible for conducting System Security Plan updates, configuration management, access control enforcement, audit logging, and continuous monitoring to meet NIST standards, as well as performing regular Self-Assessment Report submissions through the Supplier Performance Risk System to validate compliance status. Incident reporting procedures must be fully operational to detect, respond to, and report cybersecurity events involving covered defense information in accordance with DFARS requirements, with timelines and documentation protocols strictly followed. This subcontract is a total small business set-aside under the SBA program, with performance located in Crane, Indiana, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on April 29, 2026, with responses due by May 12, 2026, and is managed by the Naval Surface Warfare Center Crane Division under the Department of Defense.