Cybersecurity Compliance and CUI Protection (Flow-Down)

This contract mandates the implementation of NIST SP 800-171 controls to safeguard covered defense information handled during contract performance and reporting. As a subcontract under the Department of Defense, it requires strict adherence to cybersecurity standards designed to protect controlled unclassifed information, ensuring that all relevant security measures are fully integrated into operational workflows. The requirement is a flow-down obligation, meaning any subcontractor involved in the work must also comply with these controls to maintain the integrity and confidentiality of sensitive data throughout the supply chain. The contract falls under NAICS code 541512, indicating it involves computer systems design and related services, and is managed by the Defense Logistics Agency. While specific performance locations and point of contact details are not provided, the obligation to comply with NIST SP 800-171 applies universally to all activities related to the contract. The contractual requirement is non-negotiable and must be met to ensure the protection of defense-related data, with compliance likely subject to audits and verification as part of contract oversight. The subcontract was posted on August 10, 2026, and is tied to the prime contract SPE60124D1524 with delivery order SPE60126FL09P.