Cybersecurity and CUI Protection Services

The contract seeks implementation of NIST SP 800-171 and DFARS 252.204-7012 controls to safeguard Controlled Unclassified Information within a Department of Defense environment, requiring full compliance with cybersecurity standards for handling, storing, and transmitting sensitive data. The contractor must develop and maintain a System Security Plan and Plan of Action and Milestones, establish robust incident reporting protocols, and ensure continuous alignment with federal cybersecurity requirements. All activities must be performed in support of Afsc Pzabb under a total small business set-aside designation, exclusively available to small businesses as defined by the SBA. The work is classified as a subcontract under NAICS code 541512, indicating a focus on computer systems design and related services. The solicitation was posted on June 17, 2026, with responses due by August 3, 2026, at 6:00 PM. Performance location details are not specified, but the scope is tied to DoD operations requiring secure CUI handling. The contractor is expected to deliver comprehensive cybersecurity readiness, including documentation, compliance validation, and ongoing monitoring to meet federal mandates without reliance on third-party certifications or pre-existing frameworks outside the specified standards.