Cybersecurity & CUI Compliance for Supplier Reporting

The contract requires full compliance with NIST Special Publication 800-171 to safeguard Controlled Unclassified Information (CUI) across all systems managed by the supplier, ensuring that robust cybersecurity measures are implemented to protect the integrity, confidentiality, and availability of sensitive data. The contractor must also adhere to the cybersecurity reporting obligations mandated by DFARS 252.204-7012, including timely notification and documentation of any cyber incidents affecting CUI, with the goal of maintaining defense industrial base security standards. Systems handling CUI must be aligned with the 110 security requirements outlined in NIST SP 800-171 and undergo continuous monitoring to validate ongoing compliance. This is a subcontract under the Department of Defense’s Fluid Handling Division, with performance required at the location in New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation is classified under NAICS code 541512, indicating it pertains to computer systems design services, and is open for response until August 3, 2026. The contractor is expected to demonstrate proven capability in implementing and sustaining CUI protection protocols, with an emphasis on incident response readiness and documentation accuracy to meet federal cybersecurity compliance standards. The contract will not specify a set-aside classification, and all proposals must be submitted through the official DIBBS portal prior to the deadline.