Secure IT and Cybersecurity Compliance Support

The contract seeks to implement and maintain cybersecurity controls aligned with NIST SP 800-171 to protect Controlled Unclassified Information (CUI) within the Department of Defense environment. This includes establishing technical and administrative safeguards to ensure CUI is handled securely, conducting required cyber incident reporting in compliance with federal standards, and ensuring all subcontractors downstream adhere to the same security requirements through proper flowdown of contractual obligations. The work involves ongoing compliance monitoring, risk mitigation, and documentation to meet federal cybersecurity standards applicable to defense-related operations. This is a small business set-aside subcontract under NAICS code 541512, issued by the Navsup Weapon Systems Support Mechanic, with performance centered in Mechanicsburg. The solicitation was posted on April 28, 2026, and responses are due by May 28, 2026. Only small businesses are eligible to bid, and the contractor must demonstrate capability in managing end-to-end cybersecurity compliance for CUI within the defense supply chain, with emphasis on operational rigor, audit readiness, and subcontractor oversight.