Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards for systems that process, store, or transmit Controlled Unclassified Information, with strict adherence to NIST SP 800-171 standards. This includes establishing technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of CUI, as well as developing and executing procedures for timely detection, reporting, and response to cyber incidents in accordance with federal requirements. All work must be performed at the designated location in Cherry Point, North Carolina, and the contractor is expected to ensure continuous compliance through regular assessments, documentation, and remediation activities. This is a subcontract under the Department of Defense, specifically managed by the Land Supply Chain organization, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on April 22, 2026, with responses due by May 4, 2026. The contractor must be prepared to demonstrate proven experience in NIST 800-171 compliance, incident response protocols, and the ability to operate within the defense industrial base environment. Failure to meet these requirements may result in contract termination or penalization, as the safeguarding of CUI is a critical national security obligation.