Cybersecurity Compliance and CUI Protection Services

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across designated systems. This includes conducting regular system assessments to verify compliance, actively monitoring for cyber threats and incidents, and submitting detailed reports within 72 hours of any detected security event. Support for Department of Defense compliance evaluations is mandatory, ensuring that all cybersecurity measures meet federal standards and are audit-ready at all times. The work must be performed at the specified location in Jacksonville, Florida, with strict adherence to timelines and reporting obligations to uphold the integrity of DoD information systems. This subcontract, classified under NAICS code 541611, is issued by the ASC Commodities Division of the Department of Defense and is open for response until May 18, 2026. All parties must ensure that their cybersecurity practices align precisely with the requirements of NIST SP 800-171, and failure to meet incident reporting windows or compliance benchmarks could result in contract default. The contractor is expected to maintain continuous readiness for DoD audits and to operate within a secure environment that enforces the protection of sensitive but unclassified data entrusted by the federal government.