Cybersecurity Compliance and CUI Handling

The contract requires implementation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information, with a focus on establishing a robust security posture compliant with federal standards. The contractor must develop a comprehensive System Security Plan detailing how these controls are applied and maintained across all relevant systems and processes. A self-assessment of compliance must be conducted using the NIST framework, and the resulting score must be formally submitted to the Supplier Performance Risk System to demonstrate adherence and readiness for handling CUI. Performance is tied to a specific location in Tracy, California, with a deadline for response set for May 21, 2026. This subcontract falls under NAICS code 541512, aligning with computer systems design and related services, and is issued by the Department of Defense under the ASC SUPPLIER OPER AE AND AF DIV. While no set-aside type is specified, the emphasis on cybersecurity compliance indicates a need for vendors with proven experience in federal information security frameworks and documented success in managing CUI environments. Timely fulfillment of all documentation and assessment requirements is critical to meeting contractual obligations and maintaining eligibility for future work.