Cybersecurity Compliance and CUI Protection

The contract requires implementation and assessment of NIST Special Publication 800-171 security controls to safeguard controlled unclassified information within contractor systems, ensuring compliance with federal cybersecurity standards. Contractors must establish and maintain appropriate technical, procedural, and administrative controls to protect CUI, including conducting a formal self-assessment to verify adherence to all required measures. Any cybersecurity incidents involving potential or actual compromise of CUI must be reported promptly in accordance with established protocols, emphasizing accountability and timely response. This is a total small business set-aside subcontract under the SBA program, reserved exclusively for small businesses, and falls under NAICS code 541612 for computer systems design services. The solicitation was posted on July 27, 2026, with a response deadline of August 11, 2026, and is managed by the Department of Defense’s Strategic Acquisition Program Directorate. Performance will occur at the contractor’s facility without designated location constraints, and all work must be completed to meet the stringent security requirements outlined in NIST SP 800-171 to ensure the integrity and confidentiality of CUI handled under this agreement.