Cybersecurity Compliance for CUI Handling (NIST SP 800-171)

The contract requires the implementation and full documentation of NIST SP 800-171 cybersecurity controls for systems that handle Controlled Unclassified Information, ensuring alignment with federal requirements for protecting sensitive but unclassified data. The scope includes assessing current security postures, deploying necessary technical and administrative safeguards, and preparing comprehensive documentation to demonstrate compliance across all 14 families of controls outlined in the NIST publication. A critical deliverable is the successful submission of a System Security Plan and associated evidence through the Supplier Performance Risk System (SPRS), achieving an acceptable assessment score to meet Department of Defense standards. Performance is expected to occur at the specified location in Tracy, California, with a zip code of 95304-5000, and the work falls under NAICS code 541512 for computer systems design services. The contract is structured as a subcontract with a narrow response window, closing just five days after posting on July 22, 2026, requiring immediate action from interested parties. The responsible agency is the DLA Dist San Joaquin under the Department of Defense, indicating the work supports defense supply chain security obligations. All efforts must focus on achieving and maintaining compliance without delays to avoid impacts on contractual obligations or future procurement eligibility.