Safeguarding of Covered Defense Information (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in alignment with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. This subcontract is aimed at ensuring robust protection of sensitive defense information handled by the contractor, with all security measures explicitly tied to the NIST framework’s requirements for access control, audit, configuration management, identification and authentication, and incident response among other controls. All activities must be performed in compliance with federal standards to mitigate risks associated with unauthorized access, disclosure, or compromise of CUI. The solicitation was posted on July 15, 2026, with a response deadline of July 27, 2026, and is categorized under NAICS code 541512 which corresponds to Computer Systems Design and Related Services. The place of performance is identified as FPO with ZIP code 96540-0196, indicating operations may involve military or overseas locations. The contracting agency is the Department of Defense through the Guam Marianas DDGM Marianas PSC division, and the contract is structured as a subcontract, meaning the successful offeror will be working under a prime contractor rather than directly with the government. The absence of set-aside designation suggests the opportunity is open to all eligible businesses regardless of size or ownership status.