Cybersecurity Compliance and CUI Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information (CUI) within systems managed by the contractor. The work involves a full assessment of the current cybersecurity posture to ensure alignment with the specified controls, culminating in the submission of a summary score to the Supplier Performance Risk System (SPRS) as proof of compliance. The performance location is designated as Tampa, Florida, with a zip code of 33621-5552, indicating the physical or operational site where the security measures must be applied and validated. The contract is structured as a subcontract under the NAICS code 541512, which corresponds to Computer Systems Design Services, signifying the technical and advisory nature of the work. The solicitation was posted on May 12, 2026, and responses must be submitted by May 26, 2026, providing a two-week window for proposal preparation and submission. The contracting organization is the Department of Defense through C AND T SUPPLY CHAIN, reinforcing the defense-related context and the criticality of secure handling of sensitive information. Compliance with NIST standards is non-negotiable and tied directly to contractual obligations, failure to meet which may result in performance penalties or termination.