Cybersecurity Compliance & CUI Safeguarding

The contract requires implementation and ongoing maintenance of NIST SP 800-171 Rev 1 cybersecurity controls to ensure the protection of Controlled Unclassified Information across designated systems. This includes conducting regular system assessments to verify compliance, identifying gaps, and applying necessary remediations to meet federal security standards. A comprehensive System Security Plan must be developed, continuously updated, and maintained to document the security configuration, policies, and procedures governing CUI handling. The work must be executed in alignment with Department of Defense requirements and performed at Wheeler Army Airfield, Hawaii, with all activities tailored to safeguard sensitive but unclassified data from unauthorized access, disclosure, or compromise. This is a subcontract under the NAICS code 541512 for cybersecurity services, solicited by the Aviation Supply Chain ESOC Buys division of the Department of Defense. The proposal response deadline is May 21, 2026, and the opportunity was posted on May 13, 2026. While no set-aside designation is specified, the contract is focused on technical cybersecurity execution rather than general IT support, demanding expertise in federal information security frameworks. All work must be performed in compliance with federal regulations and with strict attention to the physical and logical security requirements outlined in NIST SP 800-171, ensuring CUI remains secure throughout its lifecycle on covered systems.