180-day Special Time Charter with One 180-day Option   3

Background
The solicitation is issued by the Department of the Navy, which aims to enhance its operational capabilities through a 180-day Special Time Charter contract. The goal of this contract is to ensure the safeguarding of covered defense information and compliance with cybersecurity requirements as outlined in various regulations and standards.

Work Details
The contractor is required to perform the following tasks:

1. System Security Plan (SSP) and Plans of Action and Milestones (POAM) Reviews:
- Within 30 days of contract award, the contractor must make its SSPs available for review at their facility.
- The contractor must correct any identified deficiencies within 30 days of notification.
- Follow-on reviews may be conducted until all deficiencies are corrected.
- Subsequent reviews will occur at least every three years or upon 30 days' notice.

2. Compliance with NIST 800-171:
- Full implementation of Controlled Unclassified Information (CUI) Security Requirements as per NIST SP 800-171 or establishment of an SSP and POA&M that varies from NIST requirements.
- Specific controls to implement include multi-factor authentication, least privilege access, monitoring remote access sessions, annual audits of user privileges, cryptographic protections, confidentiality of CUI at rest, and encryption on mobile devices.

3. Cyber Incident Response:
- The contractor must report any cyber incidents within 15 days and deliver impacted data for assessment.

Place of Performance
The work will be performed at Pearl Harbor, HI (USA).