Cybersecurity & CUI Protection (NIST SP 800-171 Compliance)

This contract requires strict adherence to cybersecurity standards for the protection of Covered Defense Information as mandated by DFARS 252.204-7012, ensuring that any technical or logistics data handled under the agreement is secured in compliance with NIST SP 800-171 requirements. The subcontractor must implement comprehensive security controls to safeguard Controlled Unclassified Information, respond to cyber incidents in accordance with federal regulations, and maintain documentation demonstrating compliance throughout the performance period. All systems processing, storing, or transmitting contract-related data must be configured to meet the full suite of NIST 800-171 controls without exception. The work is to be performed at the New Cumberland location with a zip code of 17070-5002, under the oversight of the Department of Defense through its DDSP New Cumberland Facility. The solicitation, identified under NAICS code 541512 for Computer Systems Design Services, was posted on July 9, 2026, with a firm deadline for responses on July 20, 2026. This is a subcontract opportunity, and all participants must demonstrate proven capability to meet the stringent cybersecurity obligations outlined in the regulation, including timely reporting of any cyber incidents affecting Covered Defense Information. Failure to comply may result in contract termination, financial penalties, or loss of eligibility for future DoD contracts.