Cybersecurity & CUI Safeguarding (Non-IT Services Focus)

The contract requires implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information across non-IT services operations, ensuring compliance with DFARS 252.204-7012 for cyber incident reporting. All subcontractors must establish and maintain robust safeguards for CUI throughout their systems and processes, with clear accountability for identifying, responding to, and reporting cybersecurity incidents in accordance with federal standards. The work is confined to the New Cumberland location with a zip code of 17070-5002, and the effort falls under NAICS code 541512 for computer systems design services. Compliance with these requirements is mandatory and will be subject to rigorous oversight as part of the Department of Defense's broader cybersecurity initiative. The solicitation, issued by the DDSP New Cumberland Facility under the Department of Defense, is classified as a subcontract and has a response deadline of August 10, 2026. There is no set-aside designation, and the opportunity is open to eligible entities capable of meeting the stringent cybersecurity obligations outlined in the contract. The emphasis is on operational readiness and adherence to federal cybersecurity frameworks rather than technical procurement, and failure to implement the required controls or report incidents timely may result in contract non-compliance or termination. Potential respondents must demonstrate proven capability to enforce CUI protection measures within non-IT service environments and align internal policies with DOD cyber regulations.