Cybersecurity Compliance and CUI Protection (Subcontract Support)

The contract supports subcontractors in implementing DFARS 252.204-7012 requirements, focusing on compliance with NIST SP 800-171 to protect controlled unclassified information CUI and establish procedures for timely cyber incident reporting. Subcontractors must demonstrate robust cybersecurity controls across their information systems to safeguard CUI, ensuring alignment with federal defense standards and maintaining the integrity of the supply chain. This includes developing, documenting, and validating policies and procedures for access control, audit logging, malware protection, and incident response tailored to their operational environment. The contract is a total small business set aside under FAR 19.5, designated under NAICS code 541512 for computer systems design services, and is issued by the Naval Supply Systems Command Fleet Logistics Center Puget Sound under the Department of Defense. Responses are due by July 14, 2026, and the work is expected to be performed in support of defense logistics operations. Successful contractors will be required to maintain continuous compliance with CUI protection frameworks and be prepared to provide documentation, attestations, and evidence of cybersecurity maturity upon request.