Cybersecurity Compliance & CUI Protection Services

This contract involves providing cybersecurity compliance and Controlled Unclassified Information (CUI) protection services, specifically focusing on the development and maintenance of the System Security Plan (SSP) and Plan of Action & Milestones (POA&M). The services must adhere to the standards outlined in NIST SP 800-171 and meet the regulatory requirements of DFARS 252.204-7012. Additionally, the contract includes mandatory Supplier Performance Risk System (SPRS) reporting to ensure ongoing compliance and risk management. The subcontract, posted by the Department of Defense agency ASC SUPPLIER OPER AE AND AF DIV, is designated for performance in New Cumberland, ZIP code 17070-5002, under NAICS code 541612. Responses to the solicitation must be submitted by May 19, 2026, following the posting date of May 11, 2026. While the solicitation number, set-aside status, and specific organizational details are not provided, the scope clearly centers on supporting defense-related entities in safeguarding sensitive unclassified information through rigorous cybersecurity processes aligned with federal requirements.