Cybersecurity and CUI Compliance Services

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect controlled unclassified information in nonfederal systems, in full alignment with FAR 52.204-7012 and DFARS regulations. This includes establishing, documenting, and enforcing policies and procedures that ensure the confidentiality, integrity, and availability of CUI, as well as conducting regular assessments to verify compliance with all applicable cybersecurity requirements. The subcontractor must also manage and report any cyber incidents involving CUI in accordance with mandated timelines and procedures, ensuring timely notification to the appropriate government authorities and providing full cooperation during forensic investigations. The work is performed under the Defense Logistics Agency, part of the Department of Defense, and is classified as a subcontract under NAICS code 541611 for Management Consulting Services. The contract was posted on July 15, 2026, and is tied to the award reference SPE4A726D0044 with delivery reference SPE4A726F8767. While specific performance locations and point of contact details are not provided, the scope demands continuous cybersecurity vigilance, operational discipline, and adherence to federal standards for handling sensitive defense-related information across all affected systems and processes.