Cybersecurity and CUI Compliance Support

The contract requires full compliance with NIST SP 800-171 to protect Controlled Unclassified Information, ensuring all systems, processes, and personnel meet federal cybersecurity standards for handling sensitive but unclassified data. The contractor must implement and maintain appropriate security controls across networks, devices, and administrative procedures to prevent unauthorized access, disclosure, or modification of CUI. This includes continuous monitoring, documentation of security measures, and readiness for periodic government audits to verify adherence to regulatory requirements. Support for the Supplier Performance Assessment Resource System (SPRS) is mandatory, requiring accurate and timely submission of cybersecurity posture data to demonstrate ongoing compliance. The contractor must provide unrestricted access to facilities, systems, logs, and personnel for government auditors at any time during the contract period. Performance is tied to operational readiness at the Watervliet location, and all activities must align with the NAICS code 541512 for computer systems design services. The submission deadline is July 15, 2026, and this is a subcontract under the Department of Defense, with no set-aside designation applied.