Cybersecurity & CUI Compliance Support

The contract requires comprehensive cybersecurity support to implement NIST SP 800-171 controls for the protection of Covered Defense Information, ensuring alignment with Department of Defense regulatory requirements. This includes the development of a complete System Security Plan that documents policies, procedures, and technical safeguards necessary to secure Controlled Unclassified Information in nonfederal systems. The contractor must establish and maintain a robust cyber incident response framework in accordance with DFARS 252.204-7012, ensuring timely detection, reporting, and resolution of security incidents involving CDI. Compliance with all NIST 800-171 requirements is mandatory, covering access control, audit and accountability, configuration management, identification and authentication, and other critical security families. The work is scoped as a subcontract under a Department of Defense acquisition with a NAICS code of 541512, indicating it falls within the field of computer systems design services. The solicitation is open for response until August 17, 2026, with performance expected to align with the operational needs of Land Supplier Operations SMSG. Although the place of performance and point of contact details are not provided, the full scope demands on-site or remote integration with defense supply chain systems handling sensitive unclassified data, requiring experienced personnel familiar with federal cybersecurity standards and DoD compliance protocols. All deliverables must be structured to pass audits and demonstrate continuous adherence to required security controls throughout the contract lifecycle.