Controlled Unclassified Information (CUI) Cybersecurity Compliance

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information related to the design and manufacturing data of F100-229 engine components. This effort is critical to ensuring compliance with federal standards for protecting sensitive but unclassified technical information handled by defense contractors. The work involves configuring, validating, and documenting security measures aligned with the NIST framework to mitigate risks associated with unauthorized access, data exfiltration, or system compromise in environments handling proprietary aerospace engineering data. The solicitation is structured as a subcontract under the Department of Defense, specifically managed by DLA Aviation in Oklahoma City, and falls under NAICS code 541512 for computer systems design services. Respondents must submit proposals by May 29, 2026, and the performance location is tied to the defense logistics environment supporting the F100-229 engine program. Compliance is non-negotiable, as failure to meet NIST 800-171 requirements could result in loss of contract eligibility, penalties, or disruption of critical defense manufacturing supply chains. All parties must demonstrate full adherence to the standard through documented policies, control implementations, and third-party assessments where applicable.