Controlled Unclassified Information (CUI) Cybersecurity Compliance

The contract requires implementation of NIST SP 800-171 security controls across systems that handle Controlled Unclassified Information, ensuring compliance with DFARS 252.204-7012 requirements. Key responsibilities include establishing robust access controls, hardening system configurations, and maintaining strict incident reporting procedures to safeguard CUI from unauthorized access, disclosure, or compromise. The work must be performed in accordance with federal cybersecurity standards and is intended to support the Department of Defense’s mission-critical data protection objectives. The contract is classified as a subcontract under NAICS code 541512 and is associated with the Jacksonville, Florida area for performance. Responses are due by August 3, 2026, with the solicitation posted on July 23, 2026. The contracting activity falls under the Jacksonville BLDG organization within the Department of Defense, and while no set-aside designation is specified, compliance with all CUI protection requirements is mandatory for award consideration. The full solicitation details can be accessed through the provided DIBBS link.