Cybersecurity and CUI Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information (CUI) and full compliance with DFARS 252.204-7012 for reporting cyber incidents. This subcontract is focused on establishing and maintaining a robust cybersecurity posture to safeguard sensitive government data, with specific obligations to identify, report, and respond to any security breaches or anomalies that may compromise CUI. The contractor must demonstrate adherence to the standardized security requirements outlined in NIST 800-171, including access control, audit and accountability, system and communications protection, and incident response capabilities, all aligned with Department of Defense mandates. Performance of this contract will be carried out at Devils Lake with a zip code of 58301-8500, and it falls under the NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on June 25, 2026, with a firm response deadline of July 6, 2026. As a subcontract under the Department of Defense’s Fluid Handling Division, bidders must be prepared to meet stringent cyber compliance standards and provide evidence of their ability to protect CUI throughout the lifecycle of the contract. Full transparency and immediate reporting of cyber incidents are mandatory, and failure to comply with DFARS requirements may result in contract termination or penalties.