Cybersecurity Compliance for CUI Handling (NIST SP 800-171)

This contract involves performing assessments based on the NIST SP 800-171 standard to evaluate cybersecurity compliance for systems that manage Controlled Unclassified Information (CUI). The primary objective is to thoroughly assess these systems and accurately report the results to the Department of Defense's Supplier Performance Risk System (SPRS), ensuring that CUI handling meets federal security requirements. The work will be conducted as a subcontract under NAICS code 541512, which pertains to computer systems design services. The contract is issued by the ASC Commodities Division of the Department of Defense and requires performance at Tinker Air Force Base, ZIP code 73145-8000. The solicitation was posted on May 13, 2026, with a response deadline set for May 21, 2026. While specific organizational or set-aside information is not provided, the focus is on cybersecurity compliance within the DoD framework, emphasizing adherence to federal standards for protecting sensitive but unclassified data.