Cybersecurity and CUI Protection (NIST SP 800-171 Compliance)

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within systems supporting the Department of Defense facility in New Cumberland, Pennsylvania. All awarded subcontractors must fully comply with the specified NIST framework, ensuring that technical, administrative, and physical safeguards are properly configured, documented, and maintained to protect CUI from unauthorized access, disclosure, or modification. The scope includes conducting comprehensive system assessments to verify control effectiveness and establishing procedures for timely cyber incident reporting in accordance with federal requirements. This is a subcontract under the NAICS code 541512 for computer systems design services, with a response deadline of July 20, 2026. The place of performance is designated as New Cumberland, PA, and all work must be performed in alignment with defense sector cybersecurity standards. The contracting activity originates from the DDSP New Cumberland Facility, and successful bidders will be expected to demonstrate proven experience in NIST 800-171 implementation, assessment, and incident response protocols relevant to sensitive government information systems.