CUI/FCI System Security & SPRS Compliance

This contract, issued by the Naval Air Warfare Center Air Division under the Department of Defense, focuses on ensuring that systems handling Controlled Unclassified Information (CUI) or Federal Contract Information (FCI) adhere to Cybersecurity Maturity Model Certification (CMMC) and Supplier Performance Risk System (SPRS) requirements. The contract emphasizes the necessity of maintaining strict security protocols and mandates that these security obligations be extended to subcontractors involved in the work. It is designated as a Total Small Business Set-Aside in accordance with FAR 19.5, targeting small businesses with expertise in the NAICS code 541512, which relates to computer systems design services. The work is set to be performed in St James, with a response deadline of July 6, 2026. This subcontract opportunity requires interested parties to demonstrate their ability to comply with federal cybersecurity standards to protect sensitive information within the defense sector. Overall, the contract underscores the Department of Defense’s commitment to safeguarding sensitive but unclassified information through rigorous security measures and compliance with federal guidelines.