Cybersecurity Compliance for CUI

The contract requires the implementation and maintenance of NIST SP 800-171 controls to ensure the protection of controlled unclassified information throughout the performance of the subcontract. This obligation applies to all systems and environments handling such information, with compliance being a mandatory condition for contract execution. The contractor must establish, document, and sustain security controls aligned with NIST standards to safeguard data integrity, confidentiality, and availability, and must remain in continuous compliance for the duration of the engagement. This is a total small business set-aside under the SBA program, exclusively available to small businesses as defined by the NAICS code 541512, which pertains to computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 14, 2026, and the work is to be performed under the Department of Defense, specifically the Strategic Acquisition Program Directorate. While no specific location is provided for performance, the contractor must be prepared to meet all federal cybersecurity requirements and demonstrate adherence through documentation, assessments, and potential audits. The contract is issued as a subcontract, implying integration into a larger prime contractor's program requiring strict adherence to defense cybersecurity protocols.