Cybersecurity and CUI Safeguarding (Administrative)

The contract requires the implementation of NIST SP 800-171 controls to protect Controlled Unclassified Information (CUI) within contractor systems, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. All systems involved must be configured to meet the specified security requirements to prevent unauthorized access, disclosure, or manipulation of CUI, and ongoing monitoring and documentation of compliance are mandatory. Contractors are obligated to promptly report any cyber incidents affecting CUI to the designated government authorities in accordance with established protocols. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, falls under NAICS code 541512, indicating it pertains to computer systems design services. The contract was posted in July 2026 and applies to any entity performing work under the referenced delivery order, regardless of geographic location, as no specific place of performance is defined. Compliance with the cybersecurity framework outlined in NIST SP 800-171 is non-negotiable and forms the core requirement for maintaining the contractual relationship and safeguarding national security information.