Cybersecurity Compliance & CUI Protection (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the specified environment. This includes developing a System Security Plan and a Plan of Action and Milestones to document current security posture, identify gaps, and outline corrective actions to achieve full compliance. The work is focused on ensuring robust protection of CUI as mandated by federal standards, with all activities centered around meeting NIST requirements through thorough documentation, control execution, and ongoing monitoring. This subcontract is tied to the Department of Defense through DLA Dist San Joaquin and is performance-based at Tracy, CA with a ZIP code of 95304-5000. The solicitation was posted on July 17, 2026, with responses due by July 22, 2026, indicating a narrow window for submission. The NAICS code 541512 categorizes the work under Computer Systems Design Services, reflecting the technical nature of the cybersecurity implementation and assessment tasks. The contract is not subject to a specific set-aside, meaning all eligible entities may compete, and performance must align strictly with NIST guidelines to ensure adequate protection of sensitive federal information.