Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires the implementation of NIST SP 800-171 safeguards across all systems that handle Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards for protecting sensitive but unclassified data. This includes establishing and maintaining technical, administrative, and physical controls to secure CUI, as well as enabling timely incident reporting and providing forensic access to authorized personnel in the event of a security breach or suspected compromise. The work must be performed at the specified location in Texarkana, with full adherence to the security protocols outlined in the NIST framework, and all activities must support the Department of Defense’s requirements for information assurance on systems processing CUI. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside program, with the NAICS code 541512 indicating it pertains to computer systems design and related services. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026, with the contracting activity managed by the RED RIVER RECEIVING BLDG under the Department of Defense. The place of performance is fixed at the zip code 75507-5000 in Texarkana, and the subcontractor must be certified as a small business to be eligible for award. The contract emphasizes full compliance with NIST controls and the operational capability to respond to cybersecurity incidents with forensic readiness.