Cybersecurity & Controlled Unclassified Information (CUI) Compliance

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 Rev. 2 security controls for all systems processing, storing, or transmitting Controlled Unclassified Information, ensuring alignment with Department of Defense standards. It mandates strict adherence to DFARS 252.204-7012, which includes safeguarding CUI, conducting annual self-assessments, and submitting System Security Plans and Plans of Action and Milestones to the DoD. The contractor must establish and sustain a robust cybersecurity posture capable of detecting, responding to, and reporting cyber incidents to the DoD Cyber Crime Center within seventy-two hours of discovery, with full documentation and forensic readiness. This subcontract is governed by NAICS code 541512 and is performance-based at Mechanicsburg, with all cybersecurity controls and reporting obligations executed on-site. The solicitation closed on May 29, 2026, and the work is under the auspices of the Naval Supply Systems Command Weapon Systems Support. Compliance is non-negotiable, with continuous monitoring, employee training, and audit readiness required throughout the lifecycle of the contract. Any failure to meet incident reporting timelines or control implementation standards will constitute a material breach.