Cybersecurity Compliance and CUI Protection

The contract requires the implementation and maintenance of cybersecurity controls to safeguard Covered Defense Information in full alignment with DFARS 252.204-7012 and NIST SP 800-171 standards. This includes establishing robust technical and administrative safeguards to protect controlled unclassified information, conducting regular self-assessments to verify compliance with the required security controls, and ensuring timely reporting of any cybersecurity incidents affecting the information systems handling such data. All activities must be performed to meet federal cybersecurity mandates without deviation, with an emphasis on continuous monitoring, documentation, and readiness for audit. The work is to be performed at the New Cumberland location with a ZIP code of 17070-5002 under a subcontract arrangement, and the solicitation falls under NAICS code 541512 for computer systems design services. The response deadline is August 3, 2026, with the solicitation posted on July 22, 2026. The contracting activity is managed by the Department of Defense through the DDSP New Cumberland Facility, and all performance obligations must adhere strictly to the regulatory framework governing defense contractor cybersecurity, with no tolerance for noncompliance or delays in incident response.