Cybersecurity and CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires implementation of NIST SP 800-171 security controls to safeguard covered defense information and ensure compliance with cyber incident reporting requirements. This subcontract focuses on establishing and maintaining a robust cybersecurity posture aligned with federal standards for protecting controlled unclassified information within defense-related systems. All applicable controls outlined in NIST SP 800-171 must be fully integrated into the contractor's information systems to meet mandatory safeguarding obligations, including proper access controls, data encryption, audit logging, and personnel training. The performance location is specified as New Cumberland, Pennsylvania, with a response deadline of August 3, 2026, and the solicitation was posted on July 23, 2026. The contract falls under NAICS code 541512, indicating it relates to computer systems design services. The contracting activity originates from the Electrical Devices Division within the Department of Defense, and while no specific set-aside classification is indicated, the obligation to comply with NIST SP 800-171 applies regardless of entity size or status. Contractors must be prepared to document and report any cyber incidents affecting covered defense information in accordance with federal reporting timelines and procedures.