Cybersecurity Compliance and CUI Management

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard controlled unclassified information related to fuel delivery, pricing, and invoicing. This includes ensuring all systems and processes handling such data comply with the specified standards to prevent unauthorized access, disclosure, or loss. The contractor must also support Defense Federal Acquisition Regulation Supplement cyber incident reporting procedures, enabling timely identification, documentation, and reporting of any cybersecurity events affecting CUI. The work is performed under a subcontract tied to the Defense Logistics Agency within the Department of Defense, with a NAICS code of 541512 indicating it falls under computer systems design services. Performance is expected to align with federal cybersecurity mandates, and the contract is set to be active from July 15, 2026 onward. There is no set-aside designation or specific location identified for performance, suggesting the work may be conducted remotely or at varying contractor facilities compliant with federal security requirements.