Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in compliance with DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. This subcontract is tied to the Defense Logistics Agency under the Department of Defense and falls under the NAICS code 541512, indicating it involves computer systems design and related services. The contractor must ensure all systems handling CUI meet federal security standards, including access controls, audit logging, configuration management, incident response, and continuous monitoring. The obligation extends beyond initial implementation to include regular assessments, updates, and reporting to maintain compliance throughout the performance period. The work is expected to be performed without specific geographic limitations, and the contract was posted on July 16, 2026, with no set-aside designations applied.