Cybersecurity Compliance & CUI Protection (IT/Compliance Support)

This contract entails the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012 requirements. The work focuses on establishing a robust cybersecurity framework within the contractor’s information systems to protect Controlled Unclassified Information handled in support of Department of Defense operations. All activities are aligned with the standards set forth by NIST Special Publication 800-171, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response, among others. The contract is classified as a subcontract under the NAICS code 541512, indicating it involves computer systems design and related services, and is issued by the Defense Logistics Agency under the Department of Defense. The performance location is not specified, suggesting the work may be conducted remotely or across multiple sites, provided the necessary security controls are consistently applied and maintained. The contract’s primary objective is to ensure the secure handling, storage, and transmission of CUI in accordance with federal cybersecurity mandates, with ongoing compliance monitoring and documentation required to meet audit readiness and contractual obligations.