Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.