Controlled Unclassified Information (CUI) Safeguarding

The contract mandates the implementation of NIST Special Publication 800-171 cybersecurity controls to safeguard Controlled Unclassified Information, including technical drawings, specifications, and delivery schedules, as handled by the contractor. All security measures must align with federal requirements for protecting sensitive but unclassified data, ensuring that systems and processes meet the standards necessary for handling federal contract information securely. The work is scoped under a subcontract and is restricted to small businesses through a Total Small Business Set-Aside, as defined by FAR 19.5, with the North American Industry Classification System code 541512 indicating IT services related to custom computer programming and systems design. The contract was posted on May 6, 2026, with a response deadline of May 13, 2026, at 2:00 PM ET, and falls under the jurisdiction of the Department of Defense, specifically managed by Mschq Norfolk. Performance is expected to occur within the scope of defense-related activities, though no specific geographic location is designated. The solicitation does not include a designated point of contact, and all submissions must be made through the SAM.gov portal to comply with federal procurement procedures. Contractors must be prepared to demonstrate full compliance with CUI safeguarding requirements, including access controls, audit logging, media protection, and system integrity, prior to and during project execution.