NIST SP 800-171 Cybersecurity Compliance & CUI Protection

The contract requires the implementation and maintenance of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information within the Department of Defense's maritime supply chain environment. Compliance with these controls is mandatory to ensure the protection of sensitive data and to meet DFARS cyber incident reporting obligations, necessitating robust cybersecurity practices, continuous monitoring, and timely reporting of any security incidents affecting CUI. The work must be performed at Wheeler Army Airfield, Hawaii, under a subcontract arrangement, with a focus on adhering to federal cybersecurity standards as applied to defense contractors handling sensitive government information. The solicitation is categorized under NAICS code 541512 for computer systems design services and is issued by the Maritime Supply Chain ESOC Buys office under the broader oversight of the Department of Defense. The opportunity was posted on July 22, 2026, with responses required by July 27, 2026, indicating a narrow window for potential offerors to demonstrate their capability to meet the stringent security requirements. While no set-aside designation or point of contact details are provided, the place of performance is clearly designated, and all work must align with the technical and compliance expectations established by NIST SP 800-171 and DFARS regulations to maintain eligibility for this cybersecurity-focused subcontract.