Cybersecurity Compliance (NIST SP 800-171) for CUI

The contract requires strict adherence to NIST SP 800-171 Revision 2 standards to protect Controlled Unclassified Information across all systems and processes. This includes implementing comprehensive security controls, conducting regular system assessments, maintaining detailed documentation of compliance measures, and establishing protocols for timely incident reporting and response. All activities must align with the federal requirements for safeguarding CUI, ensuring that data integrity, confidentiality, and availability are maintained at all times. This subcontract, issued under the Department of Defense by the Defense Logistics Agency, falls under NAICS code 541512 for information technology services and is posted for performance at an unspecified location. Compliance is mandatory and non-negotiable, with expectations that all personnel and systems involved meet the outlined cybersecurity framework without exception. The contract does not specify a set-aside type, indicating it is open to eligible subcontractors meeting the technical and security requirements.