Cybersecurity for CUI Handling

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) within contractor systems. This subcontract is issued under the Department of Defense, specifically by the ASC Commodities Division, with performance expected at Tinker Air Force Base, Oklahoma, 73145-8000. Compliance with NIST SP 800-171 is mandatory, ensuring that all technical, administrative, and physical safeguards are properly configured and continuously monitored to protect CUI from unauthorized access, disclosure, or compromise. The contractor must demonstrate the ability to establish, test, and sustain these controls throughout the life of the agreement, maintaining audit readiness and adhering to federal cybersecurity standards. Proposals must be submitted by July 31, 2026, with the solicitation posted on July 23, 2026, under NAICS code 541512 for Computer Systems Design Services. This is a subcontract opportunity with no set-aside designation, meaning it is open to all eligible entities regardless of size or ownership. While no specific point of contact is listed, all inquiries and submissions must follow the official DIBBS platform link provided. Success in this contract hinges on proven experience in deploying NIST 800-171 controls, robust documentation practices, and the capacity to respond to assessments or audits without disruption to operations.