Cybersecurity Compliance (CUI Protection)

The contract requires implementation and maintenance of NIST SP 800-171 controls to protect Covered Defense Information, ensuring that all systems and processes handling this sensitive data meet federal cybersecurity standards. This includes establishing robust safeguards for confidentiality, integrity, and availability of data, as well as fulfilling mandatory incident reporting obligations under DFARS 252.204-7012 in the event of a security breach or compromise. The contractor must also provide ongoing support to achieve and sustain CMMC Level 2 compliance, aligning cybersecurity practices with the Defense Department’s certification framework for defense contractors handling controlled unclassified information. All work is to be performed at Cherry Point, North Carolina, with a response deadline of July 28, 2026, and the procurement is classified as a subcontract under NAICS code 541512 for computer systems design services. The contracting activity falls under the Department of Defense’s DLA Fleet Readiness Center, indicating that the work is mission-critical to sustaining operational readiness and protecting sensitive defense data. The contractor is expected to maintain continuous compliance with evolving federal cybersecurity requirements and demonstrate operational readiness for audits or assessments related to CMMC and NIST frameworks.