Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

The contract requires the implementation of NIST Special Publication 800-171 controls to protect covered defense information and ensure compliance with DFARS 252.204-7012, mandating robust cybersecurity measures for safeguarding controlled unclassified information. This includes establishing and maintaining security controls across systems handling such data, as well as defining clear procedures for detecting, reporting, and responding to cyber incidents in accordance with federal requirements. The effort is scoped as a subcontract under the Department of Defense, with performance expected at Tinker Air Force Base, Oklahoma, 73145-8000. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, under NAICS code 541512, which pertains to computer systems design services. The work supports the broader DoD objective of securing sensitive information across the defense industrial base and requires full alignment with NIST 800-171 standards, covering areas such as access control, audit, configuration management, and incident response. Failure to implement and maintain these controls could result in noncompliance penalties and jeopardize contract execution.