Controlled Unclassified Information (CUI) Security Compliance

This subcontract focuses on the implementation of cybersecurity controls in accordance with NIST SP 800-171 standards to safeguard Controlled Unclassified Information (CUI). Key requirements include the application of specific security measures to protect sensitive information, compliance with handling and reporting cyber incidents, and the use of Department of Defense-approved digital certificates. The contract is intended for entities engaged in information technology services as indicated by the NAICS code 541512. The contract is managed by the Supply Chain Management Contracting Division under the General Services Administration with performance based in San Diego. The solicitation was posted on April 30, 2026, with a response deadline of May 12, 2026. While there is no specified set-aside designation or detailed agency contact information, the subcontract emphasizes adherence to federal cybersecurity standards for contractors dealing with government-controlled sensitive data, ensuring robust protection and risk mitigation in the supply chain.