CUI Handling and Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation of NIST SP 800-171 safeguarding controls to protect Controlled Unclassified Information (CUI) in alignment with DFARS 252.240-7997, ensuring compliance with Department of Defense cybersecurity requirements. The scope includes the development of a System Security Plan (SSP) that documents the implementation, operational status, and maintenance of all required security controls, as well as the ongoing management of CUI across systems and processes. The subcontractor must demonstrate the ability to meet federal standards for data protection, risk assessment, and access control within a DoD-contracted environment. Performance is expected at Tinker Air Force Base, Oklahoma, with a response deadline of July 27, 2026. The contract falls under NAICS code 541512 for computer systems design services and is issued by the Active Devices Division under the Department of Defense. While specific point of contact details are not provided, all submissions must be made via the designated DIBBS portal. Successful performance will require not only technical implementation of controls but also clear documentation, internal policy alignment, and readiness for audit or assessment to validate compliance with CUI handling requirements.