Cybersecurity Compliance and CUI Protection

The contract requires the implementation and thorough documentation of all NIST SP 800-171 security controls across systems that process, store, or transmit Covered Defense Information, ensuring full compliance with federal cybersecurity standards for safeguarding sensitive unclassified information. The contractor must establish, maintain, and validate controls related to access control, audit and accountability, configuration management, identification and authentication, incident response, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity, all aligned with the requirements for protecting Controlled Unclassified Information. In addition to technical implementation, the contractor is obligated to complete and submit a Security Assessment Report through the Supplier Performance Risk System, providing a formal cybersecurity posture assessment that confirms adherence to NIST SP 800-171 requirements. This work is to be performed under a subcontract to the Department of Defense’s ASC Commodities Division, with performance expected to meet the stringent oversight of a federal defense entity. The opportunity is open under NAICS code 541512 for computer systems design services, and proposals must be submitted by the specified deadline to be considered for award.