Cybersecurity & CUI Compliance Support

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information on non-federal systems, ensuring alignment with federal cybersecurity standards. This includes establishing technical, administrative, and physical safeguards to protect CUI from unauthorized access, disclosure, or compromise, with continuous monitoring and adjustment of controls as needed. The contractor must also support timely cyber incident reporting in accordance with federal requirements, ensuring prompt detection, response, and documentation of any security events affecting CUI. This subcontract falls under the NAICS code 541512 for Computer Systems Design Services and is managed by the Defense Logistics Agency under the Department of Defense. The work involves compliance with federal cybersecurity mandates focused on protecting sensitive but unclassified information, and performance is expected to meet stringent DoD standards regardless of the physical location of the systems involved. The contract does not specify a set-aside status or a designated place of performance, allowing flexibility in execution as long as the cybersecurity obligations are fully met.