Cybersecurity Compliance and CUI Protection

The contract requires full implementation of NIST SP 800-171 security controls to protect Covered Defense Information and ensure compliance with Department of Defense cybersecurity standards. This includes supporting DoD assessments and maintaining the capability to report any cyber incidents within a strict 72-hour window, as mandated by DFARS clauses. All systems and processes handling sensitive defense data must meet the specified technical and procedural requirements to safeguard Controlled Unclassified Information. This is a small business set-aside subcontract under NAICS code 541512, exclusively available to small business concerns as defined by the SBA. The effort is tied to the Department of Defense and will be performed in Jacksonville, Florida, with a response deadline of August 10, 2026. The contracting activity is managed under the Land Supplier Operations Vehicle Support office, and performance is expected to align with federal cybersecurity mandates and reporting obligations without deviation.