CUI System Architecture Documentation and Compliance Planning

The contract requires the development and comprehensive documentation of a system architecture for systems that handle Controlled Unclassified Information, with specific focus on defining security boundaries, mapping data flows, and aligning controls to meet NIST SP 800-171 requirements. The scope includes a detailed remediation plan designed to achieve full compliance across all 110 security requirements outlined in the standard, ensuring that every control is addressed, implemented, and documented. The architecture must clearly articulate how CUI is protected across the system environment, including technical, administrative, and physical safeguards. This subcontract is tied to the Department of Defense and specifically supports the MARITIME SUPPLY CHAIN ESOC BUYS, with performance required at Robins AFB, Georgia, zip code 31098-1887. The solicitation was posted on August 4, 2026, and responses are due by August 7, 2026, under NAICS code 541612, which categorizes the work under systems design and integration services. The contract emphasizes precise documentation and actionable compliance planning, leaving no room for partial adherence, and requires the contractor to deliver a complete, auditable framework that enables sustained CUI protection in alignment with federal standards.