Cybersecurity and CUI Safeguarding (Information Systems)

The contract requires implementation of NIST Special Publication 800-171 controls to safeguard Controlled Unclassified Information within contractor information systems, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. This subcontract is issued under the Department of Defense and focuses on securing information systems that process, store, or transmit CUI, with the primary place of performance located in Baltimore, Maryland, at ZIP code 21226-5000. The North American Industry Classification System code 541512 indicates the work pertains to computer systems design and related services, suggesting the contractor must have technical expertise in cybersecurity architecture, risk management, and compliance enforcement. The solicitation was posted on July 28, 2026, with a response deadline of August 10, 2026, giving potential bidders approximately two weeks to prepare and submit proposals. The contract is classified as a subcontract, meaning it is part of a larger procurement structure where the prime contractor may already be engaged with the government and is now seeking specialized cybersecurity support. There is no set-aside designation provided, so all eligible businesses may compete. The contractor must ensure full alignment with NIST SP 800-171 requirements, including but not limited to access control, audit and accountability, configuration management, identification and authentication, and incident response, to protect CUI from unauthorized access, disclosure, or compromise throughout the system's lifecycle.