Information Security and CUI Management

This contract focuses on implementing and maintaining comprehensive cybersecurity controls for systems that handle Controlled Unclassified Information (CUI), ensuring strict adherence to NIST SP 800-171 standards. Key responsibilities include enforcing robust security measures such as system sanitization, managing encryption keys, and conducting annual training to maintain compliance and enhance security awareness. The contract supports a subcontract agreement aimed at safeguarding sensitive information within the Department of Health and Human Services, specifically under the FDA Office of Acquisition and Grant Services. The work will be performed primarily in Silver Spring and falls under the NAICS code 541512, which relates to computer systems design services. The contractual timeline is defined by a response deadline of June 19, 2026, with the solicitation posted on May 26, 2026. While no set-aside status or specific organizational type is noted, the focus remains on meeting stringent government cybersecurity requirements to protect information integrity and confidentiality throughout the contract duration.