Cybersecurity Compliance & CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all subcontractor systems. This effort is mandated to ensure compliance with federal cybersecurity standards for protecting sensitive but unclassified data handled by entities supporting the Department of Defense, specifically under the Defense Logistics Agency. The subcontractor must establish, monitor, and continuously enforce the required technical, administrative, and physical safeguards throughout the lifecycle of the contract to mitigate risks associated with CUI exposure. The work is governed under NAICS code 541512, indicating it involves computer systems design and related services, and is classified as a subcontract under a broader defense contract. The obligation spans all phases of performance, from initial setup to long-term operational compliance, with no set-aside designation applied. Performance is expected to occur wherever the subcontractor’s systems process or store CUI, without geographic limitations specified. The contract remains active under the reference SPE60226FD02M and is posted on the DIBBS platform as of June 26, 2026.