Cybersecurity Compliance for Controlled Information (CUI)

The contract requires the implementation and maintenance of comprehensive cybersecurity safeguards to protect controlled unclassified information (CUI) in alignment with the Cybersecurity Maturity Model Certification (CMMC) Level 2 standards and the National Institute of Standards and Technology Special Publication 800-171. This subcontract is part of a Department of Defense initiative managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance obligations centered in Corpus Christi, Texas, specifically at the zip code 78419-5255. The scope necessitates a robust cybersecurity framework covering access control, incident response, audit and accountability, system and communications protection, and continuous monitoring to ensure compliance with federal requirements for handling CUI across all affected systems. The solicitation has a posted date of August 4, 2026, and responses must be submitted by August 12, 2026, with the NAICS code 541512 indicating information technology consulting services as the relevant industry classification. The contract does not specify a set-aside type, meaning it is open to all eligible contractors regardless of size or small business status. All work must be executed in strict adherence to the specified standards, and failure to achieve or maintain CMMC Level 2 compliance could result in contract termination or penalties. The point of contact and detailed technical requirements are expected to be available via the provided DIBBS portal link.