Cybersecurity & CUI Protection

This subcontract focuses on implementing and maintaining cybersecurity controls specifically designed to protect Controlled Unclassified Information (CUI). The requirements include conducting annual Cybersecurity Maturity Model Certification (CMMC) Level II assessments to ensure ongoing compliance with established standards, as well as adhering to the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which governs safeguarding covered defense information and reporting cyber incidents. The work supports the Department of Defense through the Washington Headquarters Services. The solicitation, announced in late May 2026, requires responses by the end of June 2026 and falls under the NAICS code 541512, indicating a focus on computer systems design services. Although specific location details and points of contact are not provided, this subcontract highlights the critical need for rigorous cybersecurity measures in defense-related environments, emphasizing continuous monitoring, assessment, and compliance to protect sensitive but unclassified information.