Cybersecurity & CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all technical, administrative, and physical safeguards are properly deployed and validated. The work is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance centered at Tracy, California, 95304-5000, and must be completed by the response deadline of August 7, 2026. Compliance with NIST’s 110 specific security requirements is mandatory, covering areas such as access control, audit, configuration management, incident response, and media protection, and all systems handling CUI must be assessed for adherence prior to contract completion. The contract falls under NAICS code 541512 for computer systems design services, indicating the provider is expected to deliver both technical implementation and compliance validation services. There is no set-aside designation, so any qualified entity may respond, and performance must be conducted in accordance with federal cybersecurity standards without exception. The solicitation is hosted on the DIBBS platform, and interested parties must submit proposals prior to the July 30, 2026 posting deadline to be considered for award. Failure to meet the control requirements or demonstrate full compliance will result in disqualification or contract non-performance.