Cybersecurity and CUI Protection Services

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012. This includes establishing technical, administrative, and physical safeguards to protect controlled unclassified information handled within the contractor’s systems and environments. The work is performed as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with performance expected to align with federal cybersecurity standards applicable to defense contractors. The effort centers on achieving and maintaining continuous compliance with NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, identification and authentication, media protection, personnel security, risk assessment, system and communications protection, and system and information integrity. The subcontract is classified under NAICS code 541512, indicating it involves computer systems design and related services, and the award is tied to contract SPE7LX26D60YR. Compliance must be sustained throughout the contract period, with regular assessments and remediation activities to address vulnerabilities and ensure that all requirements for protecting CDI are met without interruption.