Cybersecurity Compliance and CUI Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to protect Controlled Unclassified Information and ensure full compliance with DFARS 252.204-7012, including the timely reporting of cybersecurity incidents. The work focuses on establishing and maintaining a secure environment that meets federal standards for safeguarding sensitive but unclassified data, with an emphasis on technical, administrative, and physical safeguards as outlined in the NIST framework. Compliance with reporting requirements for breaches or unauthorized access is mandatory and must be integrated into operational procedures. The contract is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance expected to occur in Jacksonville, Florida, at ZIP code 32212-0103. The solicitation was posted on July 21, 2026, and responses are due by July 29, 2026. The North American Industry Classification System code 541512 indicates that the work falls under computer systems design and related services. While no set-aside designation is specified, the requirement is targeted toward contractors capable of delivering robust cybersecurity infrastructure and incident response capabilities consistent with DoD standards.