Controlled Unclassified Information (CUI) Compliance & Cybersecurity

The contract requires full implementation of NIST SP 800-171 security controls to protect covered defense information handled by the contractor, ensuring compliance with federal cybersecurity standards for Controlled Unclassified Information. The contractor must conduct a Basic Assessment of their security posture, documenting adherence to all applicable controls, and submit the assessment results to the Supplier Performance Risk System to demonstrate compliance and maintain eligibility for DoD work. This obligation applies to all systems and environments handling sensitive information under the subcontract, with performance centered at POINT MUGU NAWC, ZIP 93042-5051. The subcontract falls under NAICS code 541611 and is issued by the Department of Defense through the AVIATION SUPPLY CHAIN ESOC BUYS office, with responses due by May 18, 2026. Timely and accurate submission of assessment data is critical to avoid contract penalties or loss of sourcing opportunities.