Controlled Unclassified Information (CUI) Safeguarding and Cybersecurity Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within non-classified information systems. This includes establishing and enforcing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI, as well as maintaining documented policies and procedures aligned with federal requirements. The contractor is responsible for ensuring continuous compliance through regular internal assessments and preparing for external audits conducted by federal authorities. In addition to control implementation, the contract mandates prompt cyber incident reporting in accordance with federal guidelines, requiring immediate notification of any security breaches or anomalies that compromise CUI. The contractor must maintain accurate records of all security activities, incident responses, and compliance measures to support audit readiness and demonstrate adherence to DoD standards. This subcontract, issued under the Defense Logistics Agency, supports broader Department of Defense objectives for securing CUI across the defense industrial base and applies to systems operating outside classified environments.