Cybersecurity Compliance for CUI Handling

The contract requires implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) across all relevant systems and processes, ensuring compliance with federal cybersecurity standards. This includes establishing, maintaining, and validating robust safeguards for the storage, transmission, and handling of CUI, along with continuous monitoring and reporting mechanisms to detect and respond to cyber incidents in accordance with required timelines and protocols. The contractor must also perform and submit a valid Department of Defense assessment demonstrating adherence to these controls, which will serve as proof of compliance under the DoD’s cybersecurity requirements. The work is structured as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance taking place at Tinker Air Force Base, Oklahoma, 73145-8000. The North American Industry Classification System code 541512 indicates this effort is tied to computer systems design and related services. The solicitation was posted on May 13, 2026, with proposals due by May 21, 2026, and the contract is intended to be awarded through the DIBBS platform. All efforts must align with DoD expectations for cybersecurity posture, incident transparency, and documentation integrity to support ongoing operational security and accreditation.