Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Cybersecurity Compliance & CUI Protection Services

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract mandates the implementation and ongoing maintenance of NIST SP 800-171 Rev. 2 cybersecurity controls to safeguard Controlled Unclassified Information within federal systems managed under the Department of Defense. This includes conducting regular system assessments to verify compliance, delivering mandatory employee training programs on data handling and security protocols, and ensuring full audit readiness at all times to demonstrate adherence to federal standards. The work is performed as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design and related services. All activities must align with federal requirements for protecting sensitive but unclassified information, with continuous monitoring and improvement of security postures required to mitigate risks and maintain operational compliance.

General Info

Implement NIST SP 800-171 Rev. 2 controls, training, assessments, and audit readiness for DoD CUI protection.

NAICS

541512 - Computer Systems Design Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of SPE60326FA4Q3.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

COMMERCIAL LAB TESTING - JP8

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Logistics Agency
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implement and maintain NIST SP 800-171 Rev. 2 controls to protect Controlled Unclassified Information (CUI), including system assessments, employee training, and audit readiness.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 3 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
CCRI One-Card Solutions
Solicitation # RFP27007117
The Community College of Rhode Island is soliciting proposals for a comprehensive one-card platform solution to enhance the user experience for students, faculty, and staff across its four main campuses in Warwick, Providence, Newport, and Lincoln, as well as satellite locations in Westerly and Woonsocket. The selected vendor will provide all necessary software, licenses, equipment, on-site installation, system integration, and training. Key technical requirements include support for Apple and Google Wallet mobile credentials, ADA-compliant self-service processes, and high-quality card production utilizing barcode, magnetic-stripe, and contactless technologies. The system must integrate with Banner SIS, Papercut, Micros/Aramark, and Barnes and Noble College, while maintaining compliance with FERPA, PCI, and various cybersecurity and data governance standards. Proposals are evaluated using a weighted point system totaling 106 points, covering technical qualifications, a work plan, an interview and demonstration, cost, and bonus points for Minority, Women, and Disability Business Enterprise participation. To advance through the evaluation phases, vendors must meet specific minimum score thresholds for the technical proposal and the combined technical and interview phases. The submission process requires a technical proposal limited to six pages, a detailed cost proposal, and a completed ISBE participation plan. The solicitation was posted on November 4, 2026, with a response deadline of December 4, 2026.
State of Rhode Island

POSTED

about 4 hours ago

DEADLINE

in 30 days
View Details
NAICS: 541512
New
SLED
EDD Request for Quote No. 133571 Public Key Infrastructure Digital Certificate Management System Services
Solicitation # 133571
The California Employment Development Department (EDD) is soliciting bids under RFQ No. 133571 for a 12-month deliverables-based contract to maintain and enhance its enterprise certificate lifecycle management and public key infrastructure capabilities. Utilizing Keyfactor Command and EJBCA PKIaaS, the scope includes maintaining the production hosted environment and implementing 2026-2027 enhancements such as Palo Alto Universal Orchestrator integration, SCEP/ACME enrollment use cases, Microsoft Intune SCEP, and workflow automation. The contract requires 99.99% uptime coverage and premium support, with all work performed remotely and a strict prohibition on offshoring. Award will be granted to the lowest responsible bidder based on the net bid price, with specific evaluation incentives available for certified Disabled Veteran Business Enterprises, Small Businesses, Microbusinesses, and Nonprofit Veteran Service Agencies. The contract is structured around defined deliverables rather than time-and-materials, requiring a Deliverable Expectations Document and a signed Deliverable Acceptance Document for each milestone to trigger payment. Invoicing is subject to a 10% state withholding per Public Contract Code 12112. Bidders must submit all required certifications, including those regarding debarment, civil rights, and lobbying, by November 18, 2026.
California Employment Development Department

POSTED

about 5 hours ago

DEADLINE

in 14 days
View Details

More opportunities from Department Of Defense → Defense Logistics Agency

Same awarding agency

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS