Cybersecurity Compliance & CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with DFARS 252.204-7012. This includes conducting a self-assessment of the organization’s cybersecurity posture to verify adherence to the specified controls and establishing processes for timely reporting of any cyber incidents as mandated by the regulation. The work must be performed at the designated place of performance in Texarkana, Texas, with all activities focused on protecting Controlled Unclassified Information within the defense supply chain. As a subcontract under the Department of Defense, the contractor is expected to align fully with federal cybersecurity requirements without deviation. The contract is classified as a subcontract under NAICS code 541512, indicating a focus on computer systems design services, and is open for response until July 29, 2026. The solicitation originates from the ASC Commodities Division, and performance is tied to the delivery of secure, compliant cybersecurity practices for handling sensitive defense data. There is no set-aside designation specified, meaning all eligible entities may compete. Proposers must ensure their systems, policies, and incident response procedures meet the stringent standards of NIST 800-171 and DFARS to qualify for award and continued performance under this agreement.