Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) across all systems and environments engaged in government-related work. This effort must fully comply with the requirements outlined in DFARS 252.204-7012, ensuring that all CUI is protected through technical, administrative, and physical safeguards as defined by federal standards. The contractor is expected to support and facilitate government assessments, including self-assessments and potential audits, to verify compliance and demonstrate the effectiveness of implemented controls. This subcontract is issued by the Defense Logistics Agency under the Department of Defense, with performance centered at FPO, 96678, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026. All technical and procedural efforts must be focused on achieving and sustaining full NIST SP 800-171 compliance without reliance on external documentation or third-party certifications, emphasizing operational readiness and consistent adherence to federal cybersecurity requirements throughout the contract lifecycle.