Cybersecurity Compliance & CUI Safeguarding (IT/Compliance Support)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 and the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012 to safeguard Controlled Unclassified Information associated with the fuel supply contract. The work involves ensuring all systems handling such information meet federal requirements for access control, audit and accountability, configuration management, identification and authentication, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The subcontractor is responsible for establishing, documenting, and sustaining compliance measures, including conducting regular assessments, remediating gaps, and providing evidence of compliance to the Defense Logistics Agency. The effort is categorized under NAICS code 541512 for computer systems design services and supports the Department of Defense’s obligation to protect CUI across its supply chain. Performance is tied to systems involved in the fuel logistics contract managed by the Defense Logistics Agency, and while the exact location of performance is unspecified, the compliance requirements apply wherever CUI is processed, stored, or transmitted. The contractor must maintain continuous adherence to these standards throughout the contract term, with potential audits or reviews to verify sustained compliance, and must operate within the regulatory framework governing federal contract information under the DOD’s cybersecurity mandate.