Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information throughout manufacturing processes and documentation handling, ensuring compliance with Defense Federal Acquisition Regulation Supplement requirements. This includes the development of a System Security Plan that details how CUI is protected across all relevant systems and operations, with emphasis on access controls, data encryption, audit logging, and configuration management. The contractor must establish procedures for timely cyber incident reporting as mandated by DFARS, ensuring immediate notification and coordinated response to any security breaches or anomalies affecting CUI. All activities under this subcontract are performed under the authority of the Defense Logistics Agency, part of the Department of Defense, and align with NAICS code 541512 for computer systems design services. The work is governed by federal cybersecurity standards applicable to defense contractors, with no specific set-aside designation. The place of performance and organizational details are not specified, but the obligation to maintain continuous compliance and demonstrate control effectiveness remains stringent. The contract was posted in July 2026 and is referenced under contract number SPE7L126P9059.