Cybersecurity & CUI Compliance Support

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls across systems that handle Controlled Unclassified Information, ensuring alignment with federal cybersecurity requirements. This includes assessing current security postures, configuring technical and administrative safeguards to meet all 110 controls, and preparing comprehensive evidence for a self-assessment, culminating in a formal compliance report submitted through the Defense Industrial Base Cybersecurity Assessment and Compliance system. Work must be performed at the specified location in Tracy, California, with all activities focused on achieving and maintaining full CUI compliance for systems supporting Department of Defense operations. The subcontract is issued under NAICS code 541512 for Computer Systems Design Services and has a deadline for responses on August 3, 2026, with the posting date listed as July 23, 2026. The contracting activity is under the Active Devices Division of the Department of Defense, which expects qualified vendors to demonstrate proven experience in NIST 800-171 implementation, CUI handling protocols, and successful self-assessment reporting. All deliverables must be completed in accordance with federal standards and provide auditable evidence of compliance, with no set-aside provisions specified, leaving the opportunity open to all eligible subcontractors.