Controlled Unclassified Information (CUI) / NIST SP 800-171 Compliance Support

The contract requires support to ensure compliance with DFARS 252.204-7012 and NIST SP 800-171 standards for safeguarding Controlled Unclassified Information, with a focus on implementing and maintaining the necessary security controls within the contractor’s systems and processes. This includes conducting a self-assessment of the organization’s cybersecurity posture against the NIST framework, documenting all compliance efforts, and submitting the assessment results via the Supplier Performance Risk System to meet federal requirements. All activities must align with the specific protections mandated for CUI and demonstrate a thorough understanding of the controls related to access, accountability, configuration management, incident response, and system integrity. Performance is tied to Hill Air Force Base, Utah, with a response deadline of August 3, 2026, and the work falls under NAICS code 541512 for computer systems design services. The engagement is structured as a subcontract, indicating the successful bidder will operate under a prime contractor’s broader obligation to the Department of Defense. Full documentation of policy implementation, control validation, and assessment outcomes must be maintained and made available for review, ensuring ongoing compliance throughout the contract term. Failure to meet these requirements may result in non-compliance penalties or loss of eligibility for future DoD work.