Cybersecurity & CUI Safeguarding (DFARS 252.204-7012)

The contract requires implementation of NIST SP 800-171 controls to protect Covered Defense Information and ensure full compliance with cyber incident reporting requirements under DFARS 252.204-7012. This includes establishing and maintaining a robust cybersecurity framework that safeguards CUI at rest, in transit, and in use, with specific emphasis on access control, audit and accountability, configuration management, identification and authentication, and incident response. All systems and processes handling CUI must be assessed and hardened according to the specified controls, with documentation and continuous monitoring in place to demonstrate compliance. The contract is classified as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with performance required at Port Hueneme, California, zip code 93043-4306. The NAICS code 541512 indicates the work involves computer systems design and related services. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. Successful proposers must be prepared to handle sensitive defense data in accordance with federal cybersecurity mandates and be capable of timely reporting any cyber incidents affecting CUI, with full transparency and remediation efforts as required by regulation.