Cybersecurity Safeguarding for Controlled Unclassified Information (CUI)

This contract focuses on the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) on non-federal information systems. The effort centers on ensuring that all applicable technical, administrative, and physical safeguards are properly deployed and validated to meet federal cybersecurity requirements for protecting CUI handled by subcontractors supporting the Department of Defense. The work requires a thorough understanding of the 110 controls outlined in NIST SP 800-171 and the ability to document compliance through systematic assessment and reporting methodologies. The contract is classified as a subcontract under NAICS code 541512, which pertains to computer systems design services, and is issued by the Maritime Supply Chain office within the Department of Defense. Proposals are due by August 4, 2026, and the performance location remains unspecified, though the work is anticipated to support federal CUI protection objectives across non-federal environments. Compliance with the NIST framework is mandatory, and successful bidders must demonstrate proven experience in implementing and assessing these controls, with a clear plan for ongoing monitoring, remediation of gaps, and audit readiness to sustain CUI protection throughout the contract period.