Cybersecurity Compliance and CUI Protection

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information stored on or transmitted through systems under the contractor’s responsibility. This includes developing and updating a System Security Plan that documents all implemented security measures, ensuring alignment with federal requirements for safeguarding controlled unclassified information. The contractor must also establish and maintain processes for timely cyber incident reporting in accordance with applicable regulations, ensuring immediate notification and coordinated response to any potential breaches or security events. The work is classified as a subcontract under NAICS code 541512, and performance is obligated at the location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. All work must be completed in compliance with Department of Defense standards, and responses to the solicitation are due by April 30, 2026.