Cybersecurity Compliance and CUI Safeguarding (IT Support)

The contract requires the contractor to ensure all systems involved in providing IT support comply fully with NIST Special Publication 800-171 to safeguard covered defense information, specifically controlled unclassified information. This includes implementing all required security controls, maintaining continuous compliance, and being prepared for immediate assessment or audit at any time. The contractor must also establish and maintain robust cyber incident reporting procedures in accordance with federal regulations, ensuring timely notification and documentation of any security breaches or anomalies affecting covered information. This is a subcontract under the Department of Defense, with performance centered in Johnston, Iowa, and is governed by NAICS code 541512 for computer systems design services. The solicitation was posted on August 2, 2026, with a response deadline of August 13, 2026. All systems, processes, and personnel supporting this contract must be aligned with the rigorous cybersecurity standards mandated for defense contractors, emphasizing protection of sensitive data, readiness for inspections, and transparent communication of security events. Compliance is non-negotiable and forms the foundation of the contractor’s obligations under this agreement.