Cybersecurity Compliance & CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for protecting controlled unclassified information. This includes establishing technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or compromise of sensitive data, as well as timely reporting of any cyber incidents in accordance with regulatory requirements. Full compliance with the Supplier Performance Risk System (SPRS) is mandatory, meaning the contractor must maintain an accurate and up-to-date SPRS profile reflecting current cybersecurity posture and assessment scores. This subcontract is designated as a Women-Owned Small Business Set-Aside under NAICS code 541512, reserved exclusively for eligible women-owned small businesses. It is issued by the Department of Defense under the Maritime Supply Chain office, with a response deadline of August 7, 2026, and a posted date of July 23, 2026. All work must be performed in alignment with DOD cybersecurity expectations, and the contractor is responsible for sustaining compliance throughout the contract term, including documentation, audits, and continuous monitoring to meet evolving NIST SP 800-171 requirements and SPRS submission obligations.