Cybersecurity and Controlled Unclassified Information (CUI) Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within contractor systems, ensuring alignment with federal cybersecurity standards. This includes preparing for and achieving assessment readiness, as well as establishing procedures for timely cyber incident reporting in accordance with regulatory requirements. The effort is focused exclusively on protecting CUI throughout the life cycle of the contractor’s operations and systems, with strict adherence to the outlined security framework. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, classified under NAICS code 541512 for computer systems design and related services. The solicitation, issued by the Department of Defense’s Strategic Acquisition Program Directorate, is open for response until August 13, 2026, with a posted date of July 29, 2026. Performance location details are not specified, and the contract is accessible through the DIBBS platform for interested parties to review requirements and submit proposals.