Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Unclassified Information on all systems handling such data. This includes establishing robust technical, administrative, and physical safeguards to ensure compliance with federal cybersecurity standards for protected defense information. The contractor must conduct regular self-assessments to validate control effectiveness and document findings, ensuring continuous alignment with NIST requirements and readiness for potential audits or reviews by federal entities. In addition to control implementation and self-assessment, the contractor is obligated to promptly identify, report, and respond to any cyber incidents affecting systems containing Covered Defense Information. This includes adhering to defined reporting timelines and procedures as mandated by federal regulations, coordinating with appropriate government authorities, and preserving evidence to support forensic analysis. The work is performed under a subcontract within the Department of Defense, specifically under the ASC Commodities Division, and is classified under NAICS code 541512 for computer systems design services, with a response deadline of August 17, 2026.