Cybersecurity and CUI Safeguarding (NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 controls to protect Covered Defense Information, ensuring compliance with federal cybersecurity standards for handling sensitive government data. The contractor must establish and maintain a robust security framework aligned with the NIST guidelines to safeguard Controlled Unclassified Information, including technical, administrative, and physical safeguards across systems and processes. Self-assessments are mandatory to evaluate adherence to these controls, with documentation and reporting procedures to be in place to demonstrate compliance and readiness for potential audits. Additionally, the contract mandates full support for DFARS 252.204-7012 requirements, including timely reporting of any cyber incidents affecting Covered Defense Information. This involves identifying, containing, mitigating, and reporting incidents to the Department of Defense within specified timeframes, as well as preserving evidence and cooperating with investigative efforts. The subcontract is governed under NAICS code 541512, reflecting its focus on computer systems design services, and is issued by the Strategic Acquisition Program Directorate within the Department of Defense, with responses due by August 18, 2026.