Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation and ongoing maintenance of cybersecurity safeguards aligned with NIST SP 800-171 to protect Controlled Unclassified Information (CUI) associated with contract activities, ensuring full compliance with DFARS requirements. This includes establishing technical, administrative, and physical controls to secure CUI at rest and in transit, as well as maintaining continuous monitoring and documentation of safeguard effectiveness. All systems handling CUI must be configured to meet the 110 security requirements outlined in the NIST standard and must support regular audits and assessments to verify compliance. The contractor is also responsible for timely detection, reporting, and response to cybersecurity incidents involving CUI, following established DoD protocols and timelines. Performance is expected to occur at the FPO location with ZIP 09838, and the work is classified as a subcontract under NAICS code 541512 for computer systems design services. The solicitation was posted on July 22, 2026, with responses due by August 3, 2026, and is issued by the Department of Defense's Active Devices Division under contract number SPE7M526T340C. All activities must adhere strictly to federal cybersecurity mandates without exception or deviation.