Cybersecurity and CUI Compliance Services

The contract requires comprehensive cybersecurity services to ensure full adherence to CMMC Level 2 and NIST SP 800-171 standards for safeguarding Controlled Unclassified Information in alignment with DFARS regulations. The primary objective is to implement, maintain, and continuously validate a robust cybersecurity framework that protects CUI across all systems and processes, with a focus on risk management, access control, auditability, and incident response capabilities. Compliance must be sustained throughout the contract period, requiring ongoing monitoring, documentation, and readiness for third-party assessments. The work is scoped under a subcontract with a place of performance in New Cumberland, Pennsylvania, 17070-5002, and falls under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 16, 2026, with responses due by July 27, 2026, under the Department of Defense’s Fluid Handling Division. The contractor must demonstrate proven expertise in CUI handling, cybersecurity controls, and defense supply chain compliance, ensuring that all operational, technical, and managerial controls are effectively integrated and audit-ready to meet federal mandate requirements for the protection of sensitive government information.