Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information in alignment with DFARS 252.204-7012 and 252.240-7997 requirements. This subcontract is focused on ensuring that all systems handling controlled unclassified information meet the stringent cybersecurity standards mandated by the Department of Defense, with emphasis on protecting data throughout its lifecycle and maintaining continuous compliance. The work must be performed at the designated location in FPO, ZIP 96693, and is governed under NAICS code 541512 for computer systems design services. Bidders must submit responses by the deadline of August 3, 2026, and the contracting activity is managed by the Active Devices Division under the Department of Defense. The scope involves both initial deployment of required controls and sustained operational efforts to ensure continued adherence to federal cybersecurity frameworks. All activities must be capable of supporting audits and assessments required by DFARS, and the contractor is expected to maintain full accountability for the protection of sensitive defense information without reliance on external documentation or third-party assurances.