Cybersecurity Compliance for CUI Handling (NIST SP 800-171)

The contract requires the implementation and maintenance of cybersecurity controls to protect Controlled Unclassified Information (CUI) in accordance with the Department of Defense’s DFARS 252.204-7012 clause and the National Institute of Standards and Technology Special Publication 800-171. This subcontract mandates strict adherence to the 110 security requirements outlined in NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, identification and authentication, incident response, and system and communications protection. The contractor must ensure all systems processing, storing, or transmitting CUI are fully compliant and capable of demonstrating continuous compliance through documentation, monitoring, and reporting mechanisms. The contract is classified as a subcontract under NAICS code 541512, which pertains to computer systems design services, and is issued by the Department of Defense under the agency name LAND SUPPLIER OPNS ENGINES. Performance is required at the location specified in Albany with a ZIP code of 31704-1128. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026. While no specific point of contact or set-aside details are provided, the requirement is non-negotiable regarding compliance, and failure to meet NIST SP 800-171 standards will result in contract non-compliance, potential termination, and exposure to liability under federal contracting regulations.