Cybersecurity and CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information stored, processed, or transmitted by the contractor. These controls are mandatory to ensure compliance with Department of Defense standards for protecting sensitive but unclassified information, with the primary objective of meeting DoD assessment requirements and reducing the risk of unauthorized access or data breaches. The contractor must establish, document, and monitor a robust cybersecurity posture aligned with the 110 requirements outlined in NIST SP 800-171, including access control, audit, configuration management, identification and authentication, and incident response. This is a subcontract under the Defense Logistics Agency, categorized under NAICS code 541512 for computer systems design services, indicating the work involves technical cybersecurity support rather than hardware or infrastructure procurement. The contract was posted on June 25, 2026, and is tied to specific delivery obligations under contract SPE7M526D61FP and delivery order SPE7M526F1369. Performance is expected to support DoD-wide information security objectives, and the contractor must be prepared to undergo assessments to verify compliance with the established controls. There is no set-aside designation, meaning the opportunity is open to all eligible entities, and the work must be performed in alignment with federal guidance for safeguarding controlled unclassified information.