Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires full implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information in accordance with DFARS 252.204-7012, covering system security, incident reporting procedures, and proper media handling practices. All security measures must be systematically applied to ensure the confidentiality, integrity, and availability of CUI throughout the contract lifecycle, with strict adherence to federal cybersecurity standards mandated for defense contractors. This is a subcontract under the Defense Logistics Agency, categorized under NAICS code 541512 for computer systems design services, and was posted on June 26, 2026. Compliance with the prescribed cybersecurity requirements is mandatory, and performance is expected to meet all DoD-specific obligations related to CUI safeguarding, with no set-aside preferences indicated. The contract’s place of performance and point of contact details are not specified, but the obligation to comply with NIST and DFARS standards applies regardless of location, and failures in implementation may result in contract termination or penalties.