Cybersecurity & CUI Compliance Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls outlined in NIST Special Publication 800-171 to safeguard Controlled Unclassified Information (CUI) generated or handled in support of performance under the agreement. This effort is specific to protecting CUI associated with defense logistics operations and must be carried out in full compliance with federal requirements for information security. The subcontractor is responsible for establishing, monitoring, and sustaining the technical, administrative, and physical safeguards mandated by NIST SP 800-171 throughout the contract lifecycle. The work falls under NAICS code 541512 for Computer Systems Design Services and is managed by the Defense Logistics Agency under the Department of Defense. Although the physical location of performance is not specified, the security obligations apply regardless of where the work is conducted. The subcontract is intended to ensure continuous compliance with CUI protection standards and to support the broader cybersecurity posture of the defense supply chain, with no set-aside provisions specified. All activities must align with the requirements tied to contract SPE60526D1005 and delivery order SPE60526FHVR4.