Cybersecurity and CUI Protection (NIST SP 800-171 Compliance)

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) tied to the project, with a focus on developing and sustaining a System Security Plan (SSP) and a Plan of Action and Milestones (POA&M) to document compliance efforts and remediation activities. This subcontract, issued by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY, is aligned with NAICS code 541512 and mandates strict adherence to federal cybersecurity standards for handling unclassified but sensitive information. The performance location is designated as NEW CUMBERLAND, with a zip code of 17070-5002, and all work must be executed in compliance with the specified controls to ensure continuous protection of CUI throughout the lifecycle of the contract. The solicitation was posted on July 16, 2026, with a firm response deadline of July 27, 2026, leaving a limited window for submissions. The contract does not specify a set-aside designation, meaning it is open to all eligible subcontractors regardless of business size or category. While no point of contact is listed, interested parties can access further details via the provided DIBBS link. The requirement emphasizes ongoing compliance, not just initial implementation, ensuring that security controls remain effective and are adapted as threats evolve, with thorough documentation to demonstrate accountability and regulatory alignment.