Cybersecurity and Controlled Unclassified Information (CUI) Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to protect Controlled Unclassified Information wherever the equipment includes embedded software or network connectivity. Compliance with these cybersecurity standards is mandatory to ensure the confidentiality, integrity, and availability of CUI throughout the lifecycle of the delivered products or services. The contractor must also establish and maintain incident reporting procedures in accordance with DFARS 252.204-7012, ensuring timely notification of any cyber incidents that compromise CUI. All work is to be performed at the designated place of performance in Washington, DC, with a zip code of 20375. The contract is structured as a subcontract under a Total Small Business Set-Aside, as defined by the SBA, and falls under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 27, 2026, with a response deadline of July 31, 2026, indicating a brief window for submission. The contracting activity originates from the Naval Research Laboratory under the Department of Defense, emphasizing the critical nature of cybersecurity compliance for defense-related technical services.