Cybersecurity Compliance and CUI Safeguarding

The contract requires full implementation of NIST SP 800-171 controls to protect covered defense information stored, processed, or transmitted on information systems, ensuring alignment with federal cybersecurity standards for controlled unclassified information. The contractor must maintain an up-to-date System Security Plan that documents the security controls in place, their implementation status, and ongoing governance to sustain compliance. Additionally, the contractor is responsible for supporting DFARS 252.204-7012 requirements, including swift detection, reporting, and response to any cyber incidents involving covered defense information, in accordance with specified timelines and reporting formats outlined in the regulation. The work is scoped as a subcontract under the Department of Defense and is performance-based at the New Cumberland facility with a ZIP code of 17070-5002. The solicitation was posted on July 9, 2026, with responses due by July 20, 2026, and falls under the NAICS code 541512 for computer systems design services. The contract is not subject to any specified small business set-aside, and while no point of contact is listed, the responsible agency is the DDSP New Cumberland Facility. Participation requires proven expertise in defense cybersecurity compliance, incident response readiness, and the ability to sustain continuous compliance through documentation, monitoring, and audit-ready practices.