Cybersecurity and CUI Compliance Support

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all contractor systems, ensuring full alignment with DFARS 252.204-7012 requirements. This effort involves a comprehensive evaluation of existing cybersecurity measures, identification of gaps, and the deployment of necessary technical, administrative, and physical controls to meet federal standards for protecting CUI. The successful contractor must demonstrate the ability to conduct thorough assessments, remediate deficiencies, and maintain ongoing compliance throughout the performance period. The work is structured as a subcontract under the Department of Defense, specifically managed by SPRMM1 DLA Mechanicsburg, with a NAICS code of 541512 indicating the focus on computer systems design and related services. The solicitation was posted on May 6, 2026, and responses are due by June 5, 2026, at 4:00 PM. Performance will occur across contractor-operated systems, with no specific geographic limitations designated, and the contractor must be prepared to support federal information security obligations without the benefit of a set-aside designation. All activities must align with DoD expectations for supply chain cybersecurity and CUI protection, with verification and documentation as critical components of submission.