Cybersecurity Compliance and CUI Protection Services

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) across all applicable systems. This includes conducting regular self-assessments to validate compliance, identifying gaps, and applying corrective actions to ensure continuous alignment with federal cybersecurity standards. The ultimate goal is to achieve and sustain CMMC Level 2 certification, which involves not only technical safeguards but also documentation of policies, procedures, and workforce training related to information protection. All work must be performed at the designated location in Cherry Point, North Carolina, with a strict deadline for response by May 21, 2026. The subcontract falls under NAICS code 541612, indicating it is for computer systems design services, and is issued by the Department of Defense’s ASC Commodities Division. Failure to meet these requirements may result in non-compliance penalties and loss of eligibility to handle CUI.