Cybersecurity Compliance & CUI Protection (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as outlined in NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) within the performance scope. This includes establishing, documenting, and sustaining all required security measures to ensure compliance with federal standards for protecting sensitive but unclassified data. A critical component of the obligation is the annual self-assessment of the implemented controls, accompanied by formal reporting to verify adherence and identify any deficiencies requiring corrective action. The work is classified as a subcontract under the NAICS code 541512 and is managed by the ACTIVE DEVICES DIVISION of the Department of Defense, with performance location specified as NEW CUMBERLAND, PA, 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, emphasizing a tight turnaround for qualified offerors to submit proposals.