CUI-Compliant IT and Cybersecurity Support

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard Controlled Unclassified Information within information systems, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. This includes establishing technical, administrative, and physical safeguards to protect CUI from unauthorized access, disclosure, or modification, as well as enabling timely cyber incident reporting in accordance with requirements set by the Department of Defense. The work is scoped as a subcontract under the Defense Logistics Agency and falls under the NAICS code for computer systems design services, with performance expected to support the broader cybersecurity infrastructure of the DoD. Efforts under this contract must align with the full scope of NIST SP 800-171 controls, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response. Continuous monitoring, system hardening, and documentation of compliance measures are required to maintain operational readiness and meet federal reporting obligations. The contract does not specify a location for performance, but the supporting activities are tied to DoD systems and must meet the standards enforced across defense supply chain operations, ensuring consistent protection of CUI regardless of where the work is executed.