Cybersecurity Compliance and CUI Safeguarding (NIST SP 800-171)

The contract requires full implementation and thorough documentation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information in compliance with DFARS 252.204-7012. This subcontract focuses on establishing a robust security framework to protect controlled unclassified information across networks, systems, and procedures, ensuring alignment with Department of Defense standards. The work must be executed at the designated place of performance in New Cumberland, PA, with all deliverables completed and submitted by the response deadline of August 10, 2026. Compliance with NIST 800-171 is non-negotiable, requiring detailed evidence of control implementation across all 110 required security requirements, including access control, audit, configuration management, and incident response. The contract falls under NAICS code 541512 for computer systems design services and is issued by the Maritime Supply Chain organization under the Department of Defense. Only qualified contractors with proven experience in NIST 800-171 implementation and DFARS compliance may respond, and the subcontract will prioritize those capable of demonstrating documented, auditable practices for CUI protection. All activities must be performed without reliance on external certifications or third-party validations unless explicitly required by the control set, and ongoing monitoring and reporting mechanisms must be integrated into operational workflows. This effort is critical to maintaining the integrity of defense-related information systems and supporting the broader DoD cybersecurity posture.