Cybersecurity Compliance and CUI Protection (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls to protect Controlled Unclassified Information (CUI) in accordance with the requirements of DFARS clause 252.204-7012 and NIST SP 800-171 standards. The scope includes conducting system assessments to verify compliance, establishing procedures for timely incident reporting, and submitting annual documentation to demonstrate continued adherence to federal cybersecurity mandates. All tasks must be performed on systems handling CUI and aligned with the specific technical and administrative safeguards outlined in NIST SP 800-171. The contract is structured as a subcontract under the Department of Defense’s ASC Commodities Division, with performance required at the location in New Cumberland, Pennsylvania, ZIP code 17070-5002. The North American Industry Classification System code 541512 indicates the work falls under computer systems design services. Proposals must be submitted by August 10, 2026, with the solicitation posted on August 2, 2026. Compliance is mandatory and will be subject to rigorous verification, making thorough preparation and ongoing monitoring essential for successful contract fulfillment.