NIST SP 800-171 Compliance for CUI Handling

The contract requires implementation of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) associated with technical data, logistics, and compliance documentation, in full alignment with DFARS requirements. The provider must deploy and maintain the specific safeguards outlined in NIST Special Publication 800-171 to ensure the confidentiality, integrity, and availability of CUI throughout its lifecycle. This subcontract is positioned under NAICS code 541512, indicating it involves computer systems design services, with performance obligations centered in Greensboro, North Carolina, at the designated zip code 27409. The effort falls under the purview of the Defense Logistics Agency within the Department of Defense and is subject to the stringent security expectations mandated for federal contractors handling sensitive, non-classified government information. Interested parties must respond by the deadline of August 3, 2026, with submissions evaluated for technical compliance and capacity to meet the NIST SP 800-171 control baseline. The requirement encompasses not only the technical deployment of controls such as access management, audit logging, media protection, and incident response but also the establishment of documented policies and procedures, ongoing personnel training, and continuous monitoring to maintain compliance. Any deviations or deficiencies in implementation could result in contract non-compliance, potential termination, or legal repercussions given the sensitive nature of the information protected. This subcontract is non-set-aside and open to all qualified entities capable of delivering robust, auditable cybersecurity infrastructure aligned with federal defense standards.