Top

Cybersecurity Compliance and CUI Management

Active

Federal

Response Deadline08/03/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → BULK PETROLEUM PRODUCTView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 1

subcontract

Response DeadlineAug 3

Submission deadline

Response Deadline

08/03/2026, 05:00:00 PM UTCin 14 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → BULK PETROLEUM PRODUCT

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → BULK PETROLEUM PRODUCT

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation and monitoring of NIST SP 800-171 controls to protect Controlled Unclassified Information (CUI), including incident reporting, media preservation, and subcontractor compliance flow-down.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

DIBBS

Cybersecurity Compliance (CMMC Level 2)The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring alignment with the Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012. This includes establishing robust cyber incident reporting procedures to meet federal requirements for timely disclosure of security breaches involving sensitive defense data. The work must support compliance at the Cybersecurity Maturity Model Certification Level 2 standard, which demands a structured approach to cybersecurity readiness, documentation, and continuous monitoring across the organization’s information systems. The effort is classified as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code for computer systems design and related services. Performance is expected to be carried out in support of federal defense operations, with no geographic restrictions specified.

Defense Logistics Agency

POSTED

DEADLINE

NIST SP 800-171 Compliance and Assessment Support

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance & Reporting SupportThis contract requires comprehensive cybersecurity support to ensure compliance with NIST SP 800-171 standards for systems handling Covered Defense Information. The scope includes implementing and maintaining security controls to protect CDI, promptly reporting cyber incidents as mandated, preserving digital media related to security events for forensic analysis, and submitting required reports through the DIBNET portal. These activities are critical to meeting Department of Defense cybersecurity requirements and maintaining the integrity of defense-related information systems. The work is performed under a subcontract in support of the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design and related services. The contract does not specify a geographic location for performance, suggesting it may support systems across multiple sites or remotely. The obligation to adhere to federal standards for incident reporting and media preservation underscores the sensitivity of the data involved and the need for strict, timely, and auditable security practices.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2) SupportThe contract supports achieving CMMC Level 2 compliance for a Defense Logistics Agency subcontractor, focusing on three core cybersecurity activities: conducting a gap analysis against NIST SP 800-171 requirements, developing a comprehensive System Security Plan, and ensuring readiness for cyber incident reporting. These efforts are essential to meet federal standards for protecting controlled unclassified information within the Department of Defense supply chain. The work is aligned with NAICS code 541512, indicating it involves custom computer programming and cybersecurity consulting services, and is structured as a subcontract under the broader DOD procurement framework. Timeline and performance location details are not specified, but the solicitation was posted in July 2026, suggesting future performance under the contract reference SPE7L426D61CZ and delivery order SPE7L026F5662.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance & CDI ManagementThe contract requires the implementation and ongoing maintenance of cybersecurity protocols aligned with NIST SP 800-171 to safeguard Covered Defense Information related to invoicing and reporting functions. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled within the Defense Logistics Agency’s supply chain operations. The work falls under NAICS code 541512, indicating it involves computer systems design and related services focused on cybersecurity compliance rather than general IT support. As a subcontract under the Department of Defense, this agreement mandates strict adherence to federal cybersecurity standards for protecting CDI at all stages of processing, storage, and transmission. The scope includes continuous monitoring, documentation of controls, vulnerability management, and incident response procedures tailored to meet NIST requirements. Although the place of performance and point of contact details are unspecified, the work is expected to be performed remotely or at designated contractor locations, with full accountability to DLA oversight. The contract’s issuance date of July 20, 2026, suggests it is part of a forward-looking procurement to strengthen cybersecurity posture across defense logistics systems.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity & Covered Defense Information SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard covered defense information and ensure compliance with cyber incident reporting requirements. This subcontract is issued under the Department of Defense’s Land Supply Chain and is focused on securing sensitive data within the defense supply chain by enforcing standardized cybersecurity practices outlined in the NIST framework. The place of performance is designated as Pineville, Louisiana, with a zip code of 71360-3737, indicating the geographic scope of the work. Proposals must be submitted by July 31, 2026, and the solicitation is categorized under NAICS code 541512, which corresponds to Computer Systems Design and Related Services. The work involves both initial deployment and continuous monitoring of security measures to meet federal requirements for protecting controlled unclassified information and promptly reporting any cyber incidents.

POSTED

DEADLINE

CMMC Compliance Implementation & Certification Support

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity and CMMC Assessment Support

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 Assessment)The contract seeks support to achieve Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance for an organization operating under the Department of Defense’s Land Supply Chain. The work includes conducting a thorough system assessment to identify gaps in current cybersecurity practices, developing and organizing the necessary documentation to meet CMMC Level 2 requirements, and coordinating directly with a Certified Third-Party Assessment Organization (C3PAO) to facilitate and prepare for the official third-party audit. All efforts must align with the standards outlined in the CMMC framework, ensuring the system meets the required controls for handling controlled unclassified information. Performance is obligated at Fort Riley, Kansas, with a ZIP code of 66442-0000, and the solicitation falls under NAICS code 541512, indicating IT consulting services. The contract is structured as a subcontract, and while no set-aside designation is specified, the response deadline is set for July 31, 2026, with the requirement posted on July 20, 2026.

POSTED

DEADLINE

Invoice Processing via WAWF/VIM ASAPThe contract mandates the electronic processing of invoices and the automated generation of DD250 delivery documents through the Web Application for Wide Field (WAWF) system using the VIM ASAP format, requiring seamless integration with the contractor’s internal accounting systems. This ensures accurate, real-time submission of financial and delivery data to the Department of Defense, eliminating manual entry and reducing processing delays. The system must comply with all WAWF and VIM ASAP technical standards to maintain data integrity and interoperability across defense logistics networks. This subcontract is administered by the Defense Logistics Agency under NAICS code 541512, which corresponds to custom computer programming services, indicating the need for specialized software integration capabilities. The contract was posted on July 20, 2026, and is linked to award SPE1C126DB010, with performance obligations centered on electronic documentation workflows rather than physical delivery locations. Compliance with automated invoice and DD250 generation protocols is essential for timely payment processing and system-wide visibility within the Department of Defense supply chain infrastructure.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity and Compliance ManagementThe contract involves the ongoing management of cybersecurity compliance to protect covered defense information as required under DFARS 252.204-7012, which mandates robust safeguards for confidential federal data handled by subcontractors. It includes responsibilities for configuration control to ensure systems remain secure and compliant with established standards, as well as timely reporting of any cyber incidents that may compromise the integrity, confidentiality, or availability of covered defense information. The work is performed under a subcontract tied to the Defense Logistics Agency, operating within the broader Department of Defense framework, and is classified under NAICS code 541512 for computer systems design services. Performance obligations are tied to strict regulatory requirements with no flexibility in compliance timelines or reporting protocols, and the contract is active as of July 20, 2026, with a primary focus on maintaining continuous adherence to federal cybersecurity mandates throughout its duration.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity and CUI Safeguarding ServicesThe contract pertains to the implementation and ongoing maintenance of cybersecurity controls designed to safeguard Covered Defense Information and ensure full compliance with the Cybersecurity Maturity Model Certification Level 2 requirements. The work involves establishing robust security measures aligned with NIST SP 800-171 standards to protect Controlled Unclassified Information, with a focus on continuous monitoring, risk management, and compliance validation. This effort supports the Department of Defense's broader objective of securing sensitive data across its supply chain through standardized cybersecurity practices. The contract is structured as a small business subcontract under a Total Small Business Set-Aside, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. Performance is required to be conducted at a designated location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 20, 2026, and responses must be submitted by July 31, 2026. The procuring activity is the NUCLEAR REACTOR PROGRAM under the Department of Defense, and all work must comply with federal acquisition regulations governing subcontracting and cybersecurity obligations.

NUCLEAR REACTOR PROGRAM

POSTED

about 10 hours ago

DEADLINE

in 11 days

View Details

More opportunities from Department Of Defense → BULK PETROLEUM PRODUCT

Same awarding agency

NAICS: 541380

DIBBS

Quality Assurance and Inspection Services

Testing Laboratories and Services

POSTED

DEADLINE

Nationwide Fuel Additive Distribution and Delivery Logistics

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Bulk Fuel Additive Packaging and Labeling

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Fuel Additive Manufacturing and Formulation

All Other Miscellaneous Chemical Product and Preparation Manufacturing

POSTED

DEADLINE

Petroleum Lubricating Oil and Grease Manufacturing

POSTED

DEADLINE

Petroleum and Petroleum Products Merchant Wholesalers (except Bulk Stations and Terminals)

POSTED

23 days ago

DEADLINE

in about 15 hours

View Details