Cybersecurity and CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) and ensure full compliance with DFARS 252.204-7012 requirements for cyber incident reporting. This subcontract is focused on establishing a robust cybersecurity framework that protects sensitive government information processed, stored, or transmitted by the contractor, with mandatory adherence to all 110 controls outlined in NIST SP 800-171. The contractor must also have procedures in place to detect, report, and respond to cyber incidents involving CDI within the timelines and formats specified under DFARS, ensuring timely communication to the Department of Defense. The work is performance-based and located in San Diego, California, with a deadline for responses set for July 24, 2026. The contract falls under NAICS code 541512, indicating it relates to custom computer programming services, and is issued by the ASC Commodities Division under the Department of Defense. All compliance activities must align with federal cybersecurity standards, and failure to meet these requirements may result in contractual penalties or loss of eligibility for future DoD work. The solicitation is accessible through DIBBS, and the contractor is expected to demonstrate proven capability in managing CUI in accordance with federal regulations.