Cybersecurity and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012. This subcontract is under the Defense Logistics Agency, part of the Department of Defense, and focuses on establishing a robust cybersecurity framework that meets federal requirements for handling sensitive unclassified information. The work involves assessing current systems, applying technical and administrative safeguards, and sustaining compliance through continuous monitoring, documentation, and remediation of identified gaps. The contract carries a NAICS code of 541512, indicating it pertains to computer systems design and related services, and is structured as a subcontract with no set-aside designation. All performance activities must align with the standards outlined in NIST SP 800-171, ensuring that CUI is properly identified, stored, transmitted, and accessed only by authorized personnel. The contract is posted as of July 31, 2026, and the place of performance is not specified, meaning work may occur at various locations as required by the subcontractor’s operational needs. Compliance is non-negotiable, and failure to maintain controls could result in contract termination or penalties under federal acquisition regulations.