Controlled Unclassified Information (CUI) Cybersecurity Implementation

This subcontract requires the implementation of NIST SP 800-171 cybersecurity controls to protect Controlled Unclassified Information (CUI) within applicable systems. The contractor is responsible for maintaining a Plan of Action and Milestones (POA&M) to track and address any cybersecurity deficiencies. Additionally, the contract mandates flowing down these cybersecurity requirements to any subcontractors involved. The contractor must also submit cybersecurity assessment scores to the Supplier Performance Risk System (SPRS) to ensure ongoing compliance. The work is to be performed primarily in Tracy, California, under the Department of Defense’s Land Supplier Operations Vehicle Support office. This solicitation opened on May 8, 2026, with responses due by May 13, 2026. It falls under the NAICS code 541512, which relates to computer systems design services. The contract is a subcontract opportunity focused on safeguarding CUI through stringent cybersecurity measures in alignment with DoD standards.