Cybersecurity & CUI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls to protect covered defense information in full compliance with NIST SP 800-171 and DFARS regulations. This subcontract is focused on ensuring that all systems handling controlled unclassified information meet the stringent security standards mandated by the Department of Defense, with a strong emphasis on safeguarding sensitive data against unauthorized access, disclosure, or compromise. The contractor must establish, monitor, and continuously improve technical and administrative controls to align with federal cyber requirements and maintain audit readiness throughout the performance period. This work is performed under the auspices of the Defense Logistics Agency and falls within the NAICS code 541512 for computer systems design services. While specific location details are not provided, the performance is expected to occur wherever the contractor’s systems or personnel interact with covered defense information. The contract does not specify a set-aside type, indicating it is open to general competition, and all activities must be aligned with the DOD’s broader goal of securing the defense industrial base. The subcontract is tied to a larger acquisition under contract SPE8EZ21D0009 with delivery order SPE8EJ26F063A, and compliance is continuously enforced through operational and reporting obligations tied to federal cyber frameworks.