Top

Cybersecurity Compliance for Controlled Unclassified Information (CUI)

Active

Federal

Response Deadline08/03/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → DEPOT HILLView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

HILL AFB, UT, 84056-5734, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 22

subcontract

Response DeadlineAug 3

Submission deadline

Response Deadline

08/03/2026, 05:00:00 PM UTCin 10 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → DEPOT HILL

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → DEPOT HILL

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Implement NIST SP 800-171 safeguards to protect CUI and support DFARS cybersecurity compliance for non-federal systems.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

SLED

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a detailed evaluation of its current virtualization platform, focusing on health, performance, security, and architectural integrity. The scope includes validating operational reliability, uncovering potential risks, and identifying opportunities for optimization, with the goal of delivering a prioritized roadmap that aligns with organizational goals around business continuity, compliance, security, and resilience. The assessment will inform strategic decisions to enhance system stability and efficiency across critical infrastructure. This engagement is structured under the Virtualization Consulting IDIQ, with the North American Industry Classification System code 541512, indicating it falls under computer systems design and related services. The solicitation was posted on July 24, 2026, and is managed by the ICT Enterprise Infrastructure Services team within the Port of Seattle. Primary point of contact is Carol Hassard, with Jim Dawson serving as project manager; inquiries should be directed via their provided email addresses and phone numbers. The work will be performed at the Port of Seattle’s facilities, and no set-aside information is specified.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support the modernization and optimization of its Microsoft Azure and Hybrid cloud environment. The contractor will be tasked with validating and enhancing the existing Azure architecture, guiding the implementation of new services, and strengthening the organization’s security posture, system resiliency, and operational efficiency. Work will focus on ensuring all cloud designs and deployments align with the Port’s enterprise standards, operational demands, and long-term scalability goals, with an emphasis on best practices in cloud governance and architecture. The contract is classified under NAICS code 541512 for Computer Systems Design Services and is managed by the ICT Enterprise Infrastructure Services division under the Port of Seattle. Primary point of contact is Carol Hassard, with Jim Dawson serving as the Project Manager; inquiries can be directed via their provided email addresses and phone numbers. The solicitation is forecasted for release in July 2026, with no set-aside designation specified, and will be executed under a single contract vehicle to allow for flexible, task-order-based engagements as needs arise. The place of performance and administrative details are not yet defined, but work is expected to primarily support the Port’s internal infrastructure and cloud initiatives.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

FIDS Software ReplacementThe Port of Seattle is forecasted to procure a new software solution for its Flight Information Display System, aiming to replace legacy systems with modern, reliable technology that enhances passenger information delivery at airport terminals. The solicitation, posted on July 24, 2026, falls under NAICS code 541512, indicating it is for custom computer programming services, and is managed by ICT Enterprise Infrastructure Services. The project will require a vendor to deliver a fully functional, scalable, and secure software platform capable of integrating with existing airport systems while supporting real-time flight updates, multilingual displays, accessibility features, and high availability under heavy operational loads. Performance is expected to occur at the Port of Seattle’s facilities, though specific location details are not provided. Primary point of contact for inquiries is Farlis Lewis, reachable via phone or email, with Krista Sadler listed as the Project Manager for operational coordination. While the contract has not yet been solicited and no set-aside provisions are indicated, interested vendors should prepare proposals that demonstrate technical expertise in aviation display systems, experience with airport infrastructure, and adherence to industry standards for reliability and uptime. The official solicitation details and submission instructions can be accessed through the provided UI link, and responses should be tailored to meet the Port’s operational requirements for seamless integration, minimal downtime during transition, and long-term support capabilities.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Cybersecurity Compliance and NIST SP 800-171 Assessment SupportThe contract requires support for achieving and maintaining NIST SP 800-171 compliance in alignment with DFARS requirements, encompassing comprehensive system assessments, detailed documentation of security controls, and robust cyber incident reporting procedures. The effort is geared toward ensuring that covered systems meet federal standards for protecting controlled unclassified information, with a focus on thorough evaluations of security posture, control implementation, and continuous compliance monitoring. All activities must adhere strictly to the framework established by NIST and the Department of Defense, with deliverables including validated assessment reports and timely incident notifications as mandated by regulation. This subcontract is issued under the NAICS code 541512 for computer systems design services by the Strategic Acquisition Program Directorate within the Department of Defense, and responses are due by July 28, 2026. The work will be performed in support of defense-related operations, though the specific location of performance is not outlined. The solicitation is part of a broader initiative to strengthen cybersecurity readiness across the defense industrial base, emphasizing accountability, documentation integrity, and rapid response to cyber threats. Contractors must demonstrate proven experience in NIST SP 800-171 assessments and DFARS compliance, and the selection process will prioritize technical capability and demonstrated success in similar government cybersecurity engagements.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2)The contract requires implementation and self-assessment for Cybersecurity Maturity Model Certification (CMMC) Level 2 to safeguard Controlled Unclassified Information (CUI) in alignment with NIST Special Publication 800-171 requirements. The work involves establishing and documenting cybersecurity controls necessary to meet CMMC Level 2 standards, ensuring compliance through internal evaluations and evidence collection. This subcontract is tied to the Department of Defense, specifically under the Defense Logistics Agency, and performance must occur at the FPO location with ZIP code 96673. The solicitation is categorized under NAICS code 541512, indicating it relates to computer systems design services. Responses are due by July 28, 2026, and the contract was posted on July 23, 2026, with no set-aside designation specified. All activities must align with federal cybersecurity frameworks to maintain the integrity and confidentiality of CUI handled under this agreement.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance & Incident ReportingThis contract requires the implementation of NIST Special Publication 800-171 cybersecurity controls to protect covered defense information on nonfederal systems, ensuring alignment with federal standards for safeguarding sensitive data. The contractor must establish and maintain a comprehensive cybersecurity framework that meets all applicable requirements under NIST SP 800-171, including access control, audit and accountability, configuration management, and incident response measures. Compliance must be demonstrated through documented policies, procedures, and technical safeguards validated to the standards outlined in the publication. In addition to implementing the controls, the contractor is obligated to report any cyber incidents involving covered defense information within 72 hours of discovery, providing full detail of the nature, scope, and impact of the incident to the appropriate government entities. The contract is structured as a small business set-aside under SBA guidelines, specifically reserved for total small businesses, and falls under the NAICS code 541512 for computer systems design services. The solicitation is issued by the Department of Defense’s Strategic Acquisition Program Directorate, with a response deadline of July 28, 2026, and is intended for subcontracting purposes under a broader defense acquisition effort.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Cybersecurity Compliance and SPRS ReportingThe contract requires ongoing maintenance and reporting of Cybersecurity Maturity Model Certification (CMMC) Levels 1 through 3 and NIST SP 800-171 compliance through the Supplier Performance Reporting System (SPRS). This includes conducting self-assessments, compiling and submitting supporting documentation, and ensuring continuous audit readiness to meet federal cybersecurity standards. All compliance activities must be accurately recorded and updated in SPRS to demonstrate adherence to required controls and to support contractual obligations tied to handling controlled unclassified information. The work is structured as a subcontract under the Department of Defense’s ASC Commodities Division, with the North American Industry Classification System code 541512 indicating information technology services. The solicitation was posted on July 23, 2026, and responses are due by August 22, 2026. Performance is expected to occur within the scope of DoD contracting requirements, though specific performance location details are not provided. Compliance with these cybersecurity standards is critical for maintaining eligibility and trust as a subcontractor supporting defense operations, and failure to meet SPRS reporting or audit requirements could impact contract compliance and future award opportunities.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity and CUI Protection (NIST SP 800-171)The contract requires the implementation and ongoing maintenance of a comprehensive cybersecurity program aligned with NIST SP 800-171 Rev 1 standards, specifically designed to protect Controlled Unclassified Information. A core deliverable is the development of a fully documented System Security Plan that outlines policies, procedures, and controls to ensure compliance across all applicable security requirements. The contractor must also achieve and maintain the necessary assessment scores to validate adherence to the NIST framework, demonstrating that all required safeguarding measures are effectively in place and operational. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541512 indicating it pertains to computer systems design services. The solicitation, issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV, is open for responses until August 24, 2026, with performance expected to occur at an unlisted location. The successful vendor must demonstrate expertise in federal cybersecurity compliance, particularly in managing CUI within DoD contractor environments, and be prepared to support continuous monitoring, documentation, and assessment activities required to sustain certification under NIST SP 800-171 Rev 1.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity and NIST SP 800-171 Compliance SupportThe contract requires full compliance with DFARS 252.204-7012 and NIST SP 800-171 to ensure the proper safeguarding of controlled unclassified information across all systems and processes involved in the performance of work. This obligation extends to implementing the full spectrum of security controls outlined in NIST SP 800-171, including access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The subcontractor must demonstrate a formal, documented cybersecurity program aligned with these standards and be prepared to validate compliance through assessments or audits as required by the Department of Defense. The effort is classified as a subcontract under the NAICS code 541512 for computer systems design services and is managed by the Strategic Acquisition Program Directorate within the Department of Defense. The solicitation was posted on July 23, 2026, with a strict response deadline of July 28, 2026, indicating a limited window for qualified vendors to submit proposals. Performance location details are not specified, but the work likely involves supporting DoD systems handling CUI, requiring secure, controlled environments and potentially remote or onsite support. Compliance is non-negotiable and forms the core requirement for award and continued contract execution, with failure to meet these standards resulting in immediate disqualification or contract termination.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Technical Data and Drawing Management (Cybersecurity-Compliant)This contract governs the secure handling, storage, and transmission of technical drawings and test data classified as Controlled Unclassified Information, requiring full compliance with NIST Special Publication 800-171 standards to ensure robust cybersecurity controls are implemented across all processes. All parties must establish and maintain systems that protect CUI from unauthorized access, disclosure, or modification, with mandatory reporting of any cyber incidents affecting the data in accordance with federal requirements. The work involves managing sensitive engineering information under a subcontract arrangement within the Department of Defense’s Land Supply Chain, adhering to the NAICS code 541512 for computer systems design services. Compliance is not optional, and failure to meet the specified cybersecurity protocols may result in contract termination or penalties. The solicitation is open for responses until August 24, 2026, with performance expected to occur within the broader defense infrastructure, though specific location details are not provided. All work must be executed with end-to-end accountability for the integrity and confidentiality of technical data throughout its lifecycle.

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) on contractor systems. This effort is critical to ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data, and all required controls must be fully activated, tested, and formally recorded to demonstrate adherence. The subcontract is under the Department of Defense, specifically managed by PUGET SOUND, with performance taking place in BREMERTON, WA, at the zip code 98314-6001. The solicitation is categorized under NAICS code 541512, which corresponds to Computer Systems Design and Related Services, indicating the technical nature of the work involved. Responses are due by July 28, 2026, and the opportunity was posted on July 23, 2026, providing a limited window for interested parties to submit proposals. The work is part of a broader initiative to enforce cybersecurity hygiene across the defense industrial base, and successful execution demands thorough understanding of NIST SP 800-171 requirements, including risk assessments, access controls, audit and accountability measures, system and communications protection, and continuous monitoring. Documentation must be precise and auditable, as non-compliance could jeopardize the contractor’s ability to handle CUI and may lead to termination or penalties. All activities must align with the Department of Defense’s expectations for protecting sensitive information on non-federal systems.

POSTED

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 ImplementationThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard controlled unclassified information within manufacturing and supply chain systems operated by the Department of Defense. This subcontract aims to ensure that all relevant technical, administrative, and physical security measures are properly configured and continuously monitored to meet federal standards for protecting sensitive data handled in operational environments. The work is tied to a NAICS code of 541512, indicating a focus on computer systems design and related services, with performance expected to align with DoD-specific requirements for securing information across industrial and logistical networks. The solicitation was posted on July 23, 2026, with a response deadline set for August 24, 2026, giving potential contractors approximately one month to submit proposals. The contract is managed under the ASC SUPPLIER OPER AE AND AF DIV, a division within the Department of Defense, and although no specific location is provided for performance, the nature of the work implies that compliance activities will be executed at facilities connected to the defense supply chain. The contractor must deliver a robust, auditable cybersecurity posture capable of withstanding inspection and maintaining continuous adherence to NIST 800-171 controls throughout the life of the agreement.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 18 hours ago

DEADLINE

in about 1 month

View Details

More opportunities from Department Of Defense → DEPOT HILL

Same awarding agency

NAICS: 332994

New

DIBBS

CLAMP SUBASSEMBLY, MUZZThe contract pertains to the procurement of 15 units of the Clamp Subassembly Muzzle, identified by NSN 1005-01-047-3296, under solicitation SPE7L7-26-Q-2060, with a delivery requirement of 418 days after contract award. Technical and quality specifications are governed by the DLA Master List of Technical and Quality Requirements, with the applicable revision determined by the solicitation or award date depending on acquisition size. The item is classified as a Category I Munitions List component, requiring demilitarization per DODM 4160.28-Vol.3, and is subject to strict export controls under ITAR or EAR, prohibiting unauthorized disclosure or transfer to foreign persons, whether domestically or abroad. Contractors must hold a valid US/Canada Joint Certification Program certification, complete mandatory DOD training on export-controlled technical data, and receive formal approval from DLA to access controlled information. Cybersecurity compliance mandates CMMC Level 2 certification, either through self-assessment or third-party assessment by an accredited C3PAO. Manufacturing and quality standards include tailored higher-level contract quality requirements, configuration change management protocols, and adherence to Qualified Products Lists or Qualified Manufacturers Lists where applicable. Packaging must comply with DLA specifications, and inspection and acceptance occur at the supplier’s origin. Bare item marking is required per RQ017, though Unique Item Identification is waived per customer request under DFARS 252.211-7003(c)(1)(i). Government identification must be removed from non-accepted supplies, and all technical data associated with the item remains under strict control as defined by DFARS 252.225-7048.

Small Arms, Ordnance, and Ordnance Accessories Manufacturing

POSTED

DEADLINE

TIP, SUCTION DEVICE, DESThis contract specifies the procurement of a desoldering suction device, identified by NSN 3439-01-376-8040 and part number 1121-0317, with a quantity of 47 units. The item is classified as critical due to its dimensional requirements and is subject to stringent packaging and quality standards including MIL-STD-2073-1E and MIL-STD-129 for marking and packaging, with all packaging compliant with ASTM-D-3951 and DLA’s procurement requirements. The supplier must ensure no intentional addition or direct contact of mercury or mercury-containing compounds, except for approved applications such as functional batteries, fluorescent lamps, sensors, or weapon systems, with portable devices containing mercury required to have shock-proof construction and a secondary containment boundary as per NAVSEA 5100-003D. Delivery is FOB origin with zero variance allowed in quantity, inspection and acceptance occurring at destination, and the required delivery date is December 17, 2026, with a 167-day lead time. Packaging must be palletized per DLA guidelines and marked with no special marking code. The contract is issued under solicitation SPE8E6-26-T-3860, with the point of contact being Brett Scull, and the delivery address is DLA Distribution Depot Hill at Hill Air Force Base, Utah. Payment is set at $47.00 per unit, totaling $2,209. The item is sourced from approved vendors including PEK 3 Electronic GmbH, Pace Europe Limited, and Pace Incorporated.

Saw Blade and Handtool Manufacturing

POSTED

DEADLINE

VALVE, CHECKThe contract pertains to the procurement of a check valve, NSN 4820-00-397-9530, for delivery to Hill AFB under solicitation SPE7MC-26-T-146E, with a total quantity of 70 units required and a delivery deadline of 172 days after award. Each valve must be an approved source and accompanied by an acceptance test report upon delivery, while new suppliers must first complete and submit a qualification test report per drawing D695620. The certificate of conformance is prohibited unless specifically approved by the ESA. Technical and quality requirements referenced by R or I numbers are governed by the DLA Master List of Technical and Quality Requirements, with applicable revisions determined by acquisition type and solicitation amendments. The item is subject to stringent configuration change management protocols, export control under ITAR or EAR, and requires strict adherence to DFARS 252.225-7048, including restrictions on access to technical data by foreign nationals and subsidiaries. Only contractors with valid US/Canada Joint Certification Program status, completed DLA export training, and approved access authorization may handle the controlled technical data. Packaging must comply with DLA standards, and government identification must be removed from non-accepted supplies. The vendor must be CMMC Level 2 certified as a C3PAO and handle covered defense information per applicable directives.

Industrial Valve Manufacturing

POSTED

DEADLINE

Industrial Valve Manufacturing

POSTED

DEADLINE

VALVE, LINEAR, DIRECT

Industrial Valve Manufacturing

POSTED

DEADLINE

Plumbing Fixture Fitting and Trim Manufacturing

POSTED

DEADLINE

Specialized Packaging, Marking, and Labeling Services

Commercial Printing (except Screen and Books)

POSTED

DEADLINE

Domestic & International Logistics with U.S.-Flag Vessel Compliance

Freight Transportation Arrangement

POSTED

DEADLINE

Radioactive Materials Handling & Reporting

POSTED

DEADLINE

Hazardous Materials Compliance & Safety Data Sheet (SDS) Management

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

O-Ring Manufacturing and Supply for ICBM SystemsThe contract requires the manufacture and delivery of 100 precision O-rings compliant with military drawing TD102475 ST0500 Type 1A Method 41 and identified by NSN 5331-00-881-0296, specifically for use in Intercontinental Ballistic Missile systems. Each unit must meet exacting technical specifications to ensure mission-critical performance, and the supplier is obligated to conduct First Article Testing to validate conformance before full production. The O-rings must be packaged and labeled in accordance with all applicable military standards to maintain traceability, integrity, and readiness for deployment. The opportunity is issued as a subcontract under the Department of Defense, with the contracting office listed as DEPOT HILL and the place of performance designated as Hill Air Force Base, Utah, 84056-5734. The solicitation was posted on July 22, 2026, with a response deadline of August 3, 2026, and falls under NAICS code 332999 for other fabricated metal product manufacturing. All proposals must be submitted through the designated DIBBS platform, and the supplier must demonstrate capability to meet stringent defense sector requirements, including quality assurance, regulatory compliance, and secure handling procedures for national defense applications.

All Other Miscellaneous Fabricated Metal Product Manufacturing

POSTED

DEADLINE

Identification Plate Manufacturing and Compliance PackagingThe contract requires the manufacture of exactly 21 military identification plates aligned with NSN specifications, ensuring full adherence to all technical and procedural standards mandated by the Department of Defense. Each plate must be produced to exacting military quality benchmarks and accompanied by proper labeling in compliance with MIL-STD-129, which governs uniform marking for military shipments. The packaging must meet ASTM D3951 standards for protective packaging of military material, and the entire shipment must be palletized following DLA RP001 guidelines to ensure standardized handling and logistics compatibility across defense supply chains. The procurement is issued as a subcontract under NAICS code 339950, indicating it involves other fabricated metal product manufacturing. It is being managed by DEPOT HILL, a Department of Defense entity, with performance required at Hill Air Force Base, Utah, under the zip code 84056-5734. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026. The contract does not specify a set-aside classification, and while no point of contact is listed, all submissions must be made through the designated DIBBS portal linked in the documentation.

POSTED

DEADLINE