Cybersecurity Compliance & CUI Protection

The contract requires implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information across all applicable systems and processes, ensuring full compliance with federal cybersecurity standards. A comprehensive System Security Plan must be developed and maintained to document the implementation of these controls, including policies, procedures, and risk mitigation strategies aligned with DoD requirements. The contractor is expected to support and facilitate official DoD assessments of cybersecurity readiness, providing documentation, access, and technical assistance as needed throughout the evaluation process. Summary assessment scores must be submitted to the Supplier Performance Risk System to reflect compliance status and performance outcomes. The work is tied to a subcontract under the Department of Defense with a place of performance in San Diego, California, 92113-3650. The contract falls under NAICS code 541512 for Computer Systems Design Services and was posted on May 11, 2026, with a response deadline of May 22, 2026. The organization responsible for the solicitation is C AND T SUPPLY CHAIN, and all activities must align with DoD cybersecurity directives to protect sensitive but unclassified information. Timely and accurate submission of compliance artifacts and assessment results is critical to meeting contractual obligations and maintaining eligibility for future work under DoD contracts.