CUI Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls in accordance with NIST SP 800-171 standards to safeguard Controlled Unclassified Information (CUI). This includes conducting Small Business Procurement Scorecard (SPRS) assessments and timely incident reporting as part of the compliance obligations. The work is categorized as a subcontract under NAICS code 541512, which pertains to computer systems design services, indicating a focus on technical cybersecurity solutions. The Department of Defense, specifically the DDSP New Cumberland Facility located in New Cumberland, is the contracting agency. The solicitation was posted on May 29, 2026, and responses were due by June 3, 2026. The contract emphasizes protecting sensitive information within a defense environment, ensuring that the subcontractor adheres to strict regulatory requirements surrounding cybersecurity controls and accountability. The effort is crucial for maintaining the integrity and security of CUI handled by the facility.