Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

The contract requires the implementation of NIST Special Publication 800-171 controls to ensure the protection of Covered Defense Information and Controlled Unclassified Information handled during performance. This includes establishing, maintaining, and enforcing security measures across all systems and environments where CUI is processed, stored, or transmitted, with compliance being mandatory throughout the lifecycle of the subcontract. The requirements align with Department of Defense standards and are designed to safeguard sensitive information from unauthorized access, disclosure, or compromise. The subcontract falls under NAICS code 541512, indicating it is related to computer systems design services, and is managed by the Defense Logistics Agency under the Department of Defense. Performance is expected to occur in locations unspecified by the contract, but all work must adhere strictly to the CUI safeguarding protocols outlined in NIST SP 800-171. The contract was posted on July 14, 2026, and is structured as a subcontract, meaning the prime contractor bears responsibility for ensuring their subcontractor meets all cybersecurity obligations. Failure to comply with these controls could result in contract termination, financial penalties, or loss of eligibility for future DoD work.