Cybersecurity and CUI Safeguarding (IT/Compliance)

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 Rev 2 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in alignment with Department of Defense requirements. This includes establishing, documenting, and enforcing security measures across systems and processes that handle CUI, ensuring continuous compliance throughout the contract lifecycle. All incidents involving potential CUI breaches must be reported promptly according to federal guidelines, and the contractor must maintain verifiable evidence of control adherence and compliance readiness for audits and assessments. This subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the broader Department of Defense. The work is performance-based and tied directly to federal cybersecurity mandates, with the successful execution of these controls being essential for sustaining DoD contract eligibility. While specific location details are not provided, the requirement applies to all environments where CUI is processed, stored, or transmitted, and compliance is non-negotiable for maintaining contract standing.