Cybersecurity & CUI Safeguarding Compliance (NIST SP 800-171)

The contract requires full implementation and assessment of NIST SP 800-171 controls to protect covered defense information in accordance with DFARS 252.204-7012. This includes developing a comprehensive System Security Plan that details how controls are applied across systems handling sensitive data, as well as creating and maintaining a Plan of Actions and Milestones to address any deficiencies, track remediation efforts, and demonstrate ongoing compliance. All activities must align with federal cybersecurity standards for safeguarding controlled unclassified information within defense contractor environments. Performance is expected to be conducted at the specified location in New Cumberland, PA, with a strict response deadline of July 23, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services, and is managed by the Active Devices Division of the Department of Defense. Compliance is non-negotiable and must be validated through documented processes, with continuous monitoring and reporting required to meet regulatory obligations under the DFARS clause.