Cybersecurity Compliance & CUI Protection

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Covered Defense Information and Controlled Unclassified Information across all contractor systems. This obligation is critical to ensuring robust cybersecurity posture and compliance with Department of Defense requirements for handling sensitive but unclassified data. The scope encompasses full lifecycle management of security controls, including assessment, documentation, monitoring, and remediation to meet federal standards. The work is performed under a subcontract tied to the Defense Logistics Agency, a component of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The contract is effective as of July 31, 2026, and applies to all systems processing, storing, or transmitting CDI or CUI. Compliance is non-negotiable, and failure to maintain the prescribed controls may result in contract termination or loss of eligibility for future DoD work. The place of performance and point of contact details are unspecified, but the work must be carried out in accordance with federal cybersecurity mandates regardless of location.