Cybersecurity Compliance & Safeguarding of CUI

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered contractor information systems that handle controlled unclassified information, in full alignment with DFARS 252.204-7012 requirements. The work includes developing and maintaining a comprehensive system security plan, ensuring continuous compliance with prescribed safeguarding measures, and establishing procedures for timely cyber incident reporting to the Department of Defense. All activities must be performed in accordance with federal cybersecurity standards and are subject to audit and verification to confirm adherence to regulatory obligations. The contract is structured as a subcontract and is set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program, as defined by FAR 19.5. It falls under the NAICS code 541512 for computer systems design services and is managed by the Maritime Supply Chain office within the Department of Defense. Proposals must be submitted by the specified deadline of August 6, 2026, with performance expected to occur at an undefined location, reflecting the flexible nature of remote or contractor-managed environments. Compliance with all cybersecurity mandates is mandatory and forms the core deliverable of this procurement.