Cybersecurity & CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in accordance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a compliance focus on protecting CUI from unauthorized access, disclosure, or modification through technical, administrative, and physical safeguards. All systems, processes, and personnel involved must meet the full scope of NIST 800-171 requirements, including access control, audit and accountability, configuration management, incident response, and media protection, among others. This is a subcontract under the Department of Defense, managed by the ASC SUPPLIER OPER OEM DIVISION, with a NAICS code of 541512 indicating it relates to computer systems design services. The opportunity was posted on April 22, 2026, and responses are due by April 30, 2026. The contractor must demonstrate established cybersecurity policies, documented procedures, and a proven ability to maintain compliance through continuous monitoring and corrective actions. Failure to meet these requirements may result in termination, financial penalties, or loss of eligibility for future DoD contracts. All CUI handling, storage, transmission, and disposal must adhere strictly to federal standards without exception.