Secure Cloud Hosting for CUI

The contract mandates the provision of FedRAMP Moderate-compliant cloud infrastructure to securely store and process Covered Defense Information, ensuring adherence to federal cybersecurity standards for sensitive defense data. The service must support the storage, management, and processing requirements of Controlled Unclassified Information in a cloud environment certified to meet the rigorous controls outlined in the FedRAMP Moderate baseline, with accountability for data integrity, access control, audit logging, and continuous monitoring. Performance of the work is tied to the Department of Defense’s Defense Logistics Agency under the NAICS code 518210, indicating a focus on data processing, hosting, and related services within the defense supply chain. This is a subcontract awarded under contract SPE60226FD02D, with posting dated June 25, 2026, indicating forward-looking procurement planning. The obligation is not tied to a specific geographic location, allowing flexibility in infrastructure deployment as long as compliance and security requirements are fully met. The contractor must maintain FedRAMP Moderate authorization throughout the contract term and ensure all systems handling Covered Defense Information are configured, monitored, and audited in accordance with NIST SP 800-53 controls and DoD cyber hygiene guidelines. While no set-aside type is specified, the nature of the work is clearly intended for vendors with proven capability in secure, government-certified cloud hosting environments.