Cybersecurity and CUI Safeguarding (Subcontractor Support)

This contract requires subcontractors to implement and maintain cybersecurity controls in full alignment with NIST Special Publication 800-171 to safeguard Controlled Unclassified Information (CUI) as mandated by Defense Federal Acquisition Regulation Supplement (DFARS) clauses. The subcontractor must ensure their information systems, processes, and personnel practices meet the specified security requirements to protect CUI throughout the duration of the engagement, with compliance subject to verification and ongoing evaluation. The obligation extends to all aspects of system configuration, access control, audit logging, incident reporting, and data handling procedures as defined in the referenced standards. The contract is issued under the Defense Logistics Agency, a component of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. It is structured as a subcontract and was posted on July 13, 2026, with performance tied to the broader defense supply chain. No specific place of performance or set-aside designation is identified, indicating the requirements apply regardless of geographic location as long as the subcontractor handles CUI. Compliance is non-negotiable and forms the foundation of the contractual relationship, with failure to meet NIST SP 800-171 standards potentially resulting in termination or financial penalties.