Cybersecurity and CUI Protection Services

The contract requires subcontractors to implement and maintain all Necessary NIST SP 800-171 security controls for the protection of Controlled Unclassified Information handled in connection with the design, testing, or delivery of defense-related products or services. Contractors must demonstrate full compliance with the cybersecurity framework outlined in NIST SP 800-171, ensuring that all systems, networks, and personnel involved in handling CUI meet mandated access controls, audit and accountability measures, incident response protocols, and data protection standards. This is a critical requirement for any subcontractor under the ACTIVE DEVICES DIVISION of the Department of Defense, as noncompliance will result in termination of contract eligibility and potential loss of access to sensitive information. The work is to be performed at the specified place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and all activities must align with federal cybersecurity requirements for defense subcontractors. The solicitation, identified by the code SPE7M526T312Q, is open to qualified entities under the NAICS code 541512, which covers computer systems design services. Interested parties must submit their responses by the deadline of July 20, 2026, at 5:00 p.m., and all submissions will be evaluated based on demonstrated capability to implement and sustain NIST 800-171 controls throughout the lifecycle of the subcontracted work. Failure to meet these cybersecurity obligations will disqualify contractors from participation and may result in contractual penalties or debarment.