Supply Chain Risk Management & CUI Protection (NIST SP 800-171)

The contract requires the implementation of NIST Special Publication 800-171 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) across all systems and processes involved in the subcontract. This effort is driven by Defense Federal Acquisition Regulation Supplement (DFARS) compliance obligations, ensuring that CUI is protected throughout the defense supply chain. The work is tied to a subcontract under the Department of Defense’s Defense Logistics Agency and falls under the NAICS code 541512, indicating it involves computer systems design and related services. The implementation must be fully integrated into operational workflows to meet federal cybersecurity standards and maintain authorization to handle sensitive but unclassified information. All activities must occur in alignment with DFARS requirements, meaning the contractor must assess, document, and sustain the appropriate security controls as outlined in NIST SP 800-171 without requiring additional contractual modifications. The place of performance and specific location details are not provided, indicating the work may be conducted remotely or across multiple sites as long as compliance is achieved. No set-aside provisions or procurement preferences are specified, making this opportunity open to all qualified vendors. The contract was posted in July 2026 and is accessible through the DIBBS system under award number SPE7M226V4318, emphasizing its formal status within the Defense Logistics Agency’s procurement framework.