Cybersecurity and CUI Safeguarding (for Admin Systems)

The contract requires contractors to ensure their administrative systems comply with NIST SP 800-171 standards for protecting covered defense information and fulfilling cyber incident reporting obligations, regardless of whether controlled unclassified information is directly handled. This obligation extends to all supporting infrastructure and processes used in administrative functions tied to the contract, emphasizing a broad application of cybersecurity measures beyond direct data handling. Compliance is mandatory to maintain eligibility and avoid breach of contractual terms, even in the absence of direct CUI exposure. This is a total small business set-aside subcontract under NAICS code 541512, open exclusively to small businesses as defined by the SBA. The solicitation was posted on May 4, 2026, with a response deadline of May 15, 2026, at 5:00 PM. Performance is expected to be centered in Columbus, with a zip code of 39705, under the oversight of the Department of Defense through the FA3022 14 Cons Lgca office. All participating entities must have fully implemented NIST SP 800-171 controls across their administrative systems prior to contract award and maintain continuous compliance throughout the contract lifecycle.