Controlled Unclassified Information (CUI) Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within contractor systems, ensuring compliance with Department of Defense standards. This includes the development of a comprehensive System Security Plan that documents how security controls are applied, managed, and maintained across all relevant environments. The contractor must also prepare for and achieve readiness for a formal DoD assessment, demonstrating full adherence to the required cybersecurity practices without gaps or deficiencies. The work is to be performed at Fort Riley, Kansas, 66442-0000, under a subcontract arrangement classified under NAICS code 541512, which corresponds to computer systems design services. The solicitation was posted on July 16, 2026, with a response deadline of July 24, 2026. This effort is managed by the Aviation Supply Chain ESOC Buys under the Department of Defense, and the contractor must align all activities with federal requirements for protecting CUI, including documentation, personnel training, system monitoring, and continuous compliance validation to meet DoD expectations.