Cyber Incident Reporting and CUI Handling

This contract requires the handling of covered defense information during actuator overhaul or testing, with strict adherence to NIST SP 800-171 security requirements to protect Controlled Unclassified Information. All parties must implement comprehensive safeguards to ensure the confidentiality, integrity, and availability of CUI throughout the entire lifecycle of the work, from initial processing to final delivery. Cyber incident reporting is mandatory, and any breach, anomaly, or suspected compromise must be immediately documented and reported in accordance with federal standards. The contract is classified as a subcontract under NAICS code 541330, issued by the Department of Defense through the Ok DLA Aviation office in Oklahoma City. The response deadline for submissions is August 20, 2026, and the work must be performed in compliance with all applicable defense cybersecurity protocols. There is no set-aside designation, and the performance location remains unspecified but will be tied to actuator overhaul or testing activities requiring secure CUI handling. Participants must be prepared to demonstrate full compliance with NIST controls and maintain rigorous audit trails for all CUI-related actions.