Cybersecurity Compliance for CUI Handling

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the contractor’s systems and processes. This effort is specifically tied to meeting Department of Defense cybersecurity requirements and culminates in the submission of a formal assessment through the Supplier Performance Risk System. The work must be completed in alignment with federal standards to ensure compliance and readiness for DOD audit and evaluation. Performance is expected to be conducted at a location in San Diego with a zip code of 92136, and the task falls under the NAICS code 541512, indicating it is related to computer systems design and related services. This is a subcontract opportunity issued by the Defense Logistics Agency under the Department of Defense, with a brief window for response closing on July 30, 2026. While no specific set-aside designation or point of contact is listed, the solicitation emphasizes strict adherence to cybersecurity protocols for handling CUI and requires full operational readiness to demonstrate compliance. Successful performance will involve not just technical implementation but also the creation of auditable documentation that supports a successful SPRS submission, ensuring the contractor meets the DOD’s ongoing cybersecurity assurance objectives.