Cybersecurity Compliance and CUI Handling

The contract focuses on ensuring cybersecurity compliance by implementing NIST SP 800-171 controls to protect Controlled Unclassified Information (CUI). The contractor is required to develop a comprehensive System Security Plan (SSP), perform a self-assessment of security measures, and submit the resulting compliance score to the Supplier Performance Risk System (SPRS). This work supports the Department of Defense’s standards for safeguarding sensitive information within subcontractor environments. The subcontract opportunity, titled "Cybersecurity Compliance and CUI Handling," is designated under NAICS code 541512, reflecting its role in computer systems design services. The place of performance is located in Tracy, California, with a response deadline set for May 21, 2026. The solicitation is issued by the ASC SUPPLIER OPER AE AND AF DIV of the Department of Defense, aiming to ensure that subcontractors meet critical cybersecurity requirements to maintain secure information handling and reduce risk exposure.