Cybersecurity Compliance for CUI Handling

This contract requires the implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) and ensure compliance with DFARS cyber incident reporting obligations. The work is structured as a small business set-aside subcontract under NAICS code 541512, reserved exclusively for total small businesses, and is being managed by the Department of Defense through DLA Maritime - Puget Sound. Performance is required at the facility located in Bremerton, Washington, with a zip code of 98314. The opportunity was posted on July 2, 2026, and responses must be submitted by July 7, 2026, by 8:00 AM. The contractor must establish a robust cybersecurity posture aligned with federal standards to handle, store, and transmit CUI securely while maintaining readiness to report any cyber incidents in accordance with applicable regulations.