Cybersecurity Compliance & CUI Safeguarding

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard covered defense information in alignment with DFARS 252.204-7012 requirements. The contractor must ensure that all systems handling protected information meet the specified cybersecurity standards to prevent unauthorized access, disclosure, or compromise, while also establishing procedures to promptly report any cyber incidents as mandated by federal contracting regulations. The scope encompasses not only the initial deployment of technical and administrative safeguards but also continuous monitoring, assessment, and adjustment to maintain compliance throughout the contract lifecycle. The agreement is a subcontract under the Defense Logistics Agency, operating within the Department of Defense, and falls under NAICS code 541512 for custom computer programming services. Performance is expected to support DLA's cybersecurity posture, though specific locations for execution are not defined. The contract was posted on August 5, 2026, and is accessible via the DIBBS portal under contract number SPE60226D0483 with delivery order SPE60226FD16D. No set-aside designation or point of contact information is provided, indicating the subcontractor must be prepared to respond to DLA's broader compliance and reporting obligations without localized administrative support.