Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect contractor information systems that process, store, or transmit Controlled Unclassified Information. This includes developing and sustaining a System Security Plan that accurately documents the application of these controls and ensures full compliance with DFARS requirements for safeguarding CUI. The work is focused on establishing a robust cybersecurity framework aligned with federal standards to mitigate risks associated with unauthorized access, disclosure, or compromise of sensitive data. The task is designated as a subcontract under the NAICS code 541512 and is being managed by the DLA Dist San Joaquin under the Department of Defense. Performance is expected to take place in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 30, 2026, and proposals must be submitted by August 10, 2026. While the specific point of contact and set-aside status are not provided, the timing and structure indicate a time-sensitive procurement requiring immediate attention from qualified cybersecurity service providers capable of delivering NIST and DFARS compliance within a defined scope.