Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires implementation of NIST SP 800-171 security controls to protect contractor information systems that process, store, or transmit Controlled Unclassified Information related to logistics and technical data. This effort is mandated under a subcontract issued by the Defense Logistics Agency, part of the Department of Defense, and applies to systems supporting operations tied to the Houston, Texas performance location. Compliance with the NIST framework is essential to ensure the confidentiality, integrity, and availability of CUI throughout the contractor’s environment, covering all applicable controls outlined in the publication. The solicitation, dated July 28, 2026, has a response deadline of August 10, 2026, and falls under NAICS code 541512, indicating the nature of the work relates to computer systems design services. Contractors must demonstrate established security practices aligned with federal standards and be prepared to validate their implementation of the required controls. The absence of a set-aside designation means the opportunity is open to all qualified entities, and successful offerors will be expected to maintain ongoing compliance with CUI handling requirements throughout the contract lifecycle.