CUI-Compliant Information System Operations

The contract requires the provision and ongoing maintenance of an authorized information system designed to process and store Controlled Unclassified Information in full alignment with NIST SP 800-171 and DFARS 252.204-7012. This system must meet rigorous cybersecurity standards to safeguard sensitive data, ensuring that all technical, operational, and managerial controls are implemented and continuously monitored for compliance. The contractor is responsible for maintaining the integrity, confidentiality, and availability of CUI throughout the system’s lifecycle, including updates, patches, access controls, audit logging, and incident response capabilities. This is a subcontract under the Department of Defense, specifically managed by the Defense Advanced Research Projects Agency, classified under NAICS code 518210 for data processing and hosting services. The opportunity was posted on July 6, 2026, with a response deadline of August 28, 2026. There is no specified set-aside designation or place of performance details, and the work is expected to support the agency’s secure information infrastructure needs. The contract is open to qualified entities capable of demonstrating proven expertise in securing CUI environments per federal regulatory requirements, with no geographic restrictions indicated for performance.