Cybersecurity & CUI Protection (NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 controls to protect Controlled Unclassified Information handled under the agreement, ensuring full compliance with federal cybersecurity standards. This includes developing a comprehensive system security plan and conducting assessments to validate the effectiveness of implemented safeguards, with all activities directly tied to securing CUI associated with the contract’s scope. The work is expected to be performed at the designated location in Barstow, California, with a deadline for responses set for July 27, 2026, and the contract is structured as a subcontract under the NAICS code 541512 for computer systems design services. The contracting activity falls under the Department of Defense through LSO Combat Vehicles and Armament, indicating the sensitive nature of the information handled and the criticality of cybersecurity adherence. The performance location is fixed at ZIP code 92311-5015, and the effort must align with the specific requirements outlined by NIST SP 800-171, covering all aspects of access control, audit, configuration management, identification and authentication, incident response, and risk assessment. The subcontract nature implies integration into a larger DoD cybersecurity framework, demanding precise execution and documentation to meet compliance and operational security obligations without deviation.