Cybersecurity Compliance for CUI (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in strict alignment with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement requirements. It is a subcontract focused on ensuring compliance with federal standards for protecting sensitive government data, with performance obligations centered around securing systems and processes that handle CUI. The work must be executed at the specified location in New Cumberland, Pennsylvania, 17070-5002, and the contractor is expected to establish and sustain a robust security posture consistent with the outlined frameworks. The solicitation is open for response until August 3, 2026, and is classified under NAICS code 541512, indicating it pertains to computer systems design services. The contracting activity is managed by the Maritime Supply Chain organization within the Department of Defense, underscoring the critical nature of cybersecurity for defense-related supply chain operations. While no set-aside designation is specified, the subcontract is intended for entities capable of delivering technical expertise in cybersecurity compliance, with emphasis on continuous monitoring, control adherence, and documentation of security practices to meet federal mandates.