Cybersecurity Compliance & CUI Safeguarding Services

The contract pertains to comprehensive cybersecurity compliance services focused on supporting NIST SP 800-171 safeguards for Controlled Unclassified Information, conducting a self-assessment aligned with CMMC Level 2 requirements, and ensuring timely cyber incident reporting as mandated by DFARS 252.204-7012. The scope of work requires the subcontractor to implement and validate controls designed to protect CUI, document compliance readiness through formal self-assessment procedures, and establish procedures to detect, report, and respond to cybersecurity incidents in accordance with federal defense regulations. The services must be performed at the DLA Distribution Depot in Tinker Air Force Base, Oklahoma, with all activities tailored to meet the Department of Defense’s stringent cybersecurity standards for contractors handling sensitive information. The contract is structured as a subcontract under the NAICS code 541512, indicating it relates to computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense. Responses are due by May 13, 2026, with the solicitation posted on April 29, 2026. While no set-aside designation is specified, the performance location and regulatory framework emphasize the need for precise adherence to federal cybersecurity mandates. The subcontractor must be prepared to provide detailed evidence of control implementation, maintain documentation for audit purposes, and ensure immediate notification of any cybersecurity incidents affecting CUI. Failure to meet these requirements could result in non-compliance penalties and loss of contract eligibility.