Controlled Unclassified Information (CUI) Handling and Cybersecurity

The contract requires the implementation and maintenance of cybersecurity controls aligned with NIST SP 800-171 for systems that process, store, or transmit Controlled Unclassified Information (CUI), ensuring compliance with Department of Defense standards. The contractor must support all aspects of DoD assessment requirements, including documentation, configuration management, access controls, incident response, and continuous monitoring to safeguard CUI against unauthorized access or disclosure. The work is scoped under a subcontract and must be performed at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, under the NAICS code 541512 for computer systems design services. The contracting activity is managed by the Fluid Handling Division of the Department of Defense, and the effort is critical to meeting federal cybersecurity obligations for CUI handling. While no set-aside designation is specified, the subcontract nature implies participation by a vendor supporting a prime contractor’s DoD obligations. The contractor must be prepared to demonstrate full adherence to NIST controls and provide evidence of compliance to enable successful DoD assessments.