Cybersecurity Compliance & CUI Protection Services

The contract requires the implementation and assessment of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information in alignment with DFARS 252.204-7012 requirements. This subcontract is focused on strengthening cybersecurity posture by deploying, validating, and maintaining the specified security controls necessary to safeguard CUI within the contractor’s systems and processes. The recipient must demonstrate full compliance with the technical and procedural standards outlined in NIST SP 800-171, including access control, awareness training, audit and accountability, configuration management, and incident response, among others, while documenting evidence to support audit readiness. Performance is to be delivered at the location in New Cumberland, Pennsylvania, with a response deadline of May 22, 2026, and the solicitation falls under NAICS code 541611 for management, scientific, and technical consulting services. The contract is issued under the Department of Defense through the Land Supply Chain, indicating direct relevance to defense supply chain security and the handling of sensitive but unclassified information. Compliance is non-negotiable and will be subject to rigorous assessment, requiring the contractor to provide detailed documentation, continuous monitoring mechanisms, and remediation strategies where gaps are found. Failure to meet these requirements may result in contract termination or loss of eligibility for future defense-related work.