Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

This contract mandates the implementation of NIST SP 800-171 security controls to safeguard covered contractor information systems that process, store, or transmit government data classified as Controlled Unclassified Information. The primary objective is to ensure robust cybersecurity practices are in place to protect the confidentiality, integrity, and availability of CUI, along with strict adherence to cyber incident reporting requirements as stipulated by federal regulations. Compliance is non-negotiable, with contractors expected to demonstrate full alignment with the specified framework to maintain eligibility for award and ongoing performance. The contract is structured as a subcontract under a Total Small Business Set-Aside designation, reserved exclusively for small businesses as defined by the SBA, with the NAICS code 541512 indicating it pertains to custom computer programming services. The action is issued by the Department of Defense under the agency name CONSTRUCTION & EQUIPMENT MRO SVC I, with performance required at a designated location in New Cumberland, Pennsylvania, zip code 17070-5002. Proposals must be submitted by August 3, 2026, and the solicitation is publicly accessible via the DIBBS portal, emphasizing transparency and accessibility for eligible small businesses seeking to support national defense cybersecurity objectives.