Cybersecurity & CUI Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) and ensure full compliance with the cyber incident reporting obligations outlined in DFARS 252.204-7012. This subcontract is focused on establishing a robust cybersecurity framework that aligns with federal standards to protect sensitive government data handled by the contractor, with performance expected at Fort Hood, Texas, under a NAICS code of 541512 for computer systems design services. All security measures must be fully operational and documented to meet regulatory requirements by the response deadline of August 13, 2026, with ongoing accountability for detecting, reporting, and responding to cyber incidents in accordance with DOD specifications. The work is part of a Department of Defense initiative under LSO Combat Vehicles and Armament, emphasizing the protection of CUI across the defense supply chain. The contractor must demonstrate compliance through documented policies, system configurations, user access controls, incident response protocols, and continuous monitoring capabilities as prescribed by NIST SP 800-171. Failure to meet these requirements may result in non-compliance penalties, contract termination, or loss of eligibility for future DoD work. All activities must be conducted in alignment with the stated place of performance and in accordance with the timing and procedural directives provided in the solicitation, with no set-aside provisions applicable.