CUI & Cybersecurity Compliance Implementation

The contract requires the implementation of NIST SP 800-171 security controls and full compliance with DFARS 252.204-7012 for all systems processing, storing, or transmitting Controlled Unclassified Information. This effort is scoped to ensure that the contractor establishes and maintains a secure environment meeting federal cybersecurity standards for handling CUI, including but not limited to access control, audit and accountability, configuration management, identification and authentication, and incident response measures. All systems must be assessed and documented to demonstrate adherence to these requirements with no deviations permitted unless formally approved. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is classified as a subcontract under NAICS code 541612 for management consulting services. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, with no set-aside provisions specified. The contracting activity falls under the Department of Defense, specifically under LAND SUPPLIER OPNS VEHICLE SPT, and bidders must align their technical and compliance proposals with the requirements outlined in the DIBBS portal listing provided via the official UI link.