Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) processed, stored, or transmitted on non-federal systems supporting the agreement. Compliance with these controls is mandatory and must be continuously validated to ensure the protection of sensitive data on contractor-managed networks and environments. The work is scoped to support the FLUID HANDLING DIVISION under the Department of Defense, with performance located in Anniston, Alabama, and requires adherence to the NAICS code 541512 for custom computer programming services. The solicitation is issued as a subcontract with a response deadline of August 17, 2026, and was posted on August 5, 2026. Contractors must demonstrate the capability to establish, document, and sustain the required security controls as outlined in NIST SP 800-171, including but not limited to access control, audit and accountability, configuration management, identification and authentication, and incident response. Failure to meet compliance standards may result in contractual breach or termination, and ongoing monitoring and reporting of control implementation will be expected throughout the performance period.