Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of all NIST SP 800-171 security controls to ensure proper protection of Controlled Unclassified Information (CUI) within the contractor’s systems and processes. This includes aligning policies, procedures, and technical safeguards to meet the specific requirements outlined in the NIST framework, with a strong emphasis on operational readiness for CMMC Level 2 certification. The work must be performed at Pearl Harbor, Hawaii, and is structured as a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain ESOC Buys group. The contractor must maintain continuous compliance throughout the contract period, regularly updating documentation, conducting internal assessments, and preparing for audits to validate adherence to federal cybersecurity standards applicable to defense contractors handling CUI. All activities must be executed in alignment with the NAICS code 541512, which pertains to computer systems design services, indicating a focus on technical implementation and process integration rather than general consulting.