Controlled Unclassified Information (CUI) / NIST 800-171 Compliance Support

The contract requires the implementation and thorough documentation of NIST SP 800-171 Rev 2 controls to safeguard Controlled Unclassified Information (CUI) within systems handling Department of Defense data. This includes establishing the technical, administrative, and physical safeguards mandated by the standard to ensure CUI is protected against unauthorized access, disclosure, or compromise. The effort extends to achieving and maintaining compliance with DFARS 252.204-7012, which mandates specific cybersecurity obligations for contractors working with sensitive government information. A critical component of the work involves generating an accurate SPRS score through the Supplier Performance Risk System to demonstrate compliance posture to the DoD, alongside the preparation of formal compliance reports that validate control implementation and documentation. The subcontract targets organizations capable of executing a comprehensive CUI security program aligned with NIST guidelines and DoD requirements, with a focus on measurable outcomes and audit readiness. The solicitation is open for responses until May 2, 2026, under NAICS code 541512, which classifies the work as Computer Systems Design and Related Services. Performance is expected to support the Department of Defense, though specific location details are not provided. All activities must be documented in a way that supports ongoing compliance, external assessments, and potential DIB or DoD audits, ensuring the contractor meets federal cybersecurity standards for handling CUI across all affected systems and processes.