Controlled Unclassified Information (CUI) Cybersecurity Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information, with a specific focus on Contractor Delivered Information. Full compliance with these standards is mandatory, and the contractor must conduct regular SPRS assessments to evaluate and document their cybersecurity posture. Any security incidents involving CUI must be reported promptly in accordance with federal directives. The work is performed under a subcontract tied to the Department of Defense through the Defense Logistics Agency, with the NAICS code 541512 indicating it falls under custom computer programming services. The contract remains active as of its posting date in July 2026 and is managed under the specified DIBBS award identification.