Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract focuses on the implementation and ongoing maintenance of cybersecurity controls specifically designed to protect Controlled Unclassified Information (CUI). It requires compliance with the NIST SP 800-171 standards, which outline the necessary security requirements to safeguard this sensitive data. Additionally, the contract mandates adherence to cyber incident reporting protocols as outlined under the Defense Federal Acquisition Regulation Supplement (DFARS), ensuring timely notification and response to any cybersecurity events. Issued by the Department of Defense's ASC Supplier Oper OEM Division, the subcontract pertains to NAICS code 541512, indicating a focus on computer systems design services. The work will be performed in Cherry Point, with a response deadline set for May 20, 2026. This opportunity emphasizes the critical nature of cybersecurity in defense contracting, particularly in managing and securing CUI throughout the project lifecycle.