Cybersecurity & Controlled Technical Information (CTI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. The work is scoped to support the Department of Defense at its New Cumberland facility, with performance required at the zip code 17070-5002, and is structured as a subcontract under NAICS code 541512 for customized computer programming services. All cybersecurity measures must be fully operational and auditable by the mandated response deadline of August 6, 2026, with proposals due by that date to meet the solicitation requirements issued by the Defense Logistics Agency. The contractor is expected to establish, document, and sustain a comprehensive cybersecurity program aligned with NIST SP 800-171, covering all 14 families of security requirements including access control, audit, configuration management, and incident response. This includes continuous monitoring, risk assessments, and documentation of controls to demonstrate ongoing compliance with DoD standards for protecting controlled technical information. All activities must be performed in coordination with the DDSP New Cumberland Facility, and successful performance will be essential to maintaining eligibility for future defense contracts involving sensitive information handling.