Controlled Unclassified Information (CUI) Safeguarding & IT Security Compliance

This contract requires the implementation and ongoing maintenance of security controls to safeguard Controlled Unclassified Information (CUI) on information systems, ensuring strict adherence to the National Institute of Standards and Technology Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. The scope encompasses all technical, administrative, and physical measures necessary to protect CUI throughout its lifecycle, from storage and transmission to processing and disposal, with a focus on achieving full compliance with federal cybersecurity standards for non-federal systems handling sensitive government data. The contract is structured as a subcontract under a Total Small Business Set-Aside, designated under NAICS code 541512 for Computer Systems Design Services, and is managed by the General Services Administration through its PBS Centralized Acquisition Services IDV - West. Performance is expected to occur in Denver, and responses must be submitted by August 11, 2026. The obligation to maintain continuous compliance is ongoing, requiring documented policies, regular assessments, incident reporting protocols, and workforce training to ensure sustained adherence to CUI protection requirements.