Cybersecurity Compliance & CUI Handling Support

The contract is for cybersecurity compliance and controlled unclassified information handling support, aimed at ensuring adherence to NIST SP 800-171 and DFARS 252.204-7012 standards to protect covered defense information. Services include system assessments to evaluate security controls, implementation support for required safeguards, and readiness activities for incident reporting, ensuring the contractor can promptly detect, respond to, and report cybersecurity incidents involving sensitive defense data. The work is structured as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code for other computer-related services. This engagement requires the contractor to maintain ongoing compliance with federal cybersecurity frameworks governing the storage, processing, and transmission of covered defense information. The contractor must be prepared to conduct regular evaluations of system controls, document findings, remediate deficiencies, and maintain detailed records to demonstrate compliance. Incident response capabilities must be fully operational, with clear procedures for notifying the appropriate authorities in accordance with DFARS requirements. The contract is not subject to a specific set-aside and is accessible through the DIBBS portal, with performance expectations aligned to the Department of Defense’s mandated cybersecurity posture for its subcontractors.