Cybersecurity & CUI Safeguarding Compliance

The contract requires full implementation of NIST SP 800-171 controls to safeguard covered defense information and ensure compliance with DFARS 252.204-7012, mandating the development of a comprehensive system security plan that outlines how protected data is secured across all systems and networks. All covered contract information must be handled in accordance with specified security requirements, including access controls, audit logging, incident response protocols, and continuous monitoring to prevent unauthorized access or data breaches. Failure to meet these standards could result in noncompliance penalties and loss of contract eligibility. In addition to safeguarding measures, the contractor must establish a process to detect, report, and respond to cyber incidents within 72 hours of discovery, escalating all relevant details to the Department of Defense as required. The performance location is designated as New Cumberland, PA, with the contract issued under NAICS code 541512 for computer systems design services, and is structured as a subcontract under the Department of Defense’s Active Devices Division. The response deadline is August 6, 2026, and strict adherence to the regulatory framework is non-negotiable for award or continued performance.