Cybersecurity Compliance and CUI Protection

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information throughout manufacturing and subcontracting operations. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI as it moves across systems and partners involved in the defense supply chain. All activities must align with federal cybersecurity standards and be continuously monitored to prevent unauthorized access, disclosure, or compromise. The subcontractor is also obligated to report any cybersecurity incidents involving CUI promptly and in accordance with established protocols, ensuring timely response and mitigation. This engagement is tied to the Defense Logistics Agency under the Department of Defense, with performance centered on manufacturing workflows governed by NAICS code 541512. Compliance is mandatory and ongoing, with no set-aside provisions specified, and the contract is active as of July 16, 2026.