Cybersecurity and CUI Safeguarding Support

The contract requires the implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. This includes establishing and maintaining appropriate administrative, technical, and physical safeguards to protect CUI throughout its lifecycle, along with mandatory incident reporting procedures to promptly notify relevant parties of any security breaches or anomalies. Annual self-assessments are required to validate ongoing compliance and document the effectiveness of implemented security measures. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, classified under NAICS code 541512 for computer systems design services. It is issued by the Department of Defense’s ASC Commodities Division, with performance required at a location in Tracy, California, 95304-5000. Interested parties must submit responses by the deadline of August 12, 2026, and the solicitation is available through the DIBBS platform. Participation is limited to qualifying small businesses, and the contractor must demonstrate proven capability in executing NIST 800-171 cybersecurity frameworks within a defense contracting environment.