Cybersecurity & CUI Protection (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Covered Defense Information, ensuring full alignment with the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012. This obligation includes safeguarding sensitive data handled under the contract through a robust cybersecurity framework, with continuous monitoring and documentation to demonstrate compliance. The contractor must also participate in the Supplier Performance Risk System by submitting accurate and timely SPRS reports to assess cyber posture and operational readiness. The work is classified as a subcontract under NAICS code 541512, focused on computer systems design services, and is tied to the Department of Defense’s Fluid Handling Division. Performance is expected to occur at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026. While no set-aside classification is specified, the contract demands strict adherence to federal cybersecurity standards and active reporting mechanisms to maintain accountability and traceability of protective measures applied to defense-related information.