CUI Safeguarding and Cybersecurity Compliance

The contract requires the implementation of NIST SP 800-171 security controls and full compliance with DFARS cybersecurity requirements to safeguard Controlled Unclassified Information within contractor systems. This subcontract is aimed at ensuring that all applicable cybersecurity safeguards are properly configured, documented, and maintained to meet federal standards for protecting sensitive data handled by defense supply chain contractors. The work must be performed in support of the Department of Defense’s Land Supply Chain operations, with performance duties centered at the FPO location identified by zip code 96349. Interested parties must submit responses by August 20, 2026, and the solicitation falls under NAICS code 541512 for computer systems design services. The contract mandates adherence to rigorous cyber hygiene practices as defined by NIST and DFARS, including access controls, audit logging, media protection, system monitoring, and incident reporting. Compliance is non-negotiable and will be subject to verification as part of contractual obligations, with failure to meet requirements potentially resulting in termination or financial penalties. The primary focus is the secure handling of CUI across all information systems used in the performance of this subcontract.