Cybersecurity Compliance & CUI Safeguarding (NIST SP 800-171)

This subcontract involves the implementation and ongoing maintenance of cybersecurity controls designed to protect Covered Defense Information (CDI) in compliance with the NIST SP 800-171 standards and DFARS clause 252.204-7012. The scope covers not only the establishment of required security measures but also includes incident reporting procedures and support for Contract Data Requirements List (CDRL) obligations. The contract is issued by the Department of Defense’s ASC Commodities Division, with the place of performance located in San Diego, California. The solicitation, titled "Cybersecurity Compliance & CUI Safeguarding (NIST SP 800-171)," calls for responders to submit their proposals by May 28, 2026. It falls under the NAICS code 541512, which relates to computer systems design services. The focus is on safeguarding Controlled Unclassified Information (CUI) within the defense supply chain while ensuring adherence to federal cybersecurity regulations. No specific set-aside status or organization type restrictions apply, and the contract leverages established governmental guidelines to secure sensitive defense data effectively.