Cybersecurity Compliance & CUI Safeguarding

The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information on unclassified systems, in full compliance with DFARS 252.204-7012. This effort is focused on establishing a secure environment that protects sensitive but unclassified information critical to national defense, ensuring that all required technical, administrative, and physical safeguards are properly configured, tested, and documented. The contractor must demonstrate full adherence to the 110 security requirements outlined in NIST SP 800-171 and maintain audit-ready records to verify ongoing compliance. The effort is structured as a subcontract under the Department of Defense, specifically for performance at the New Cumberland facility with a ZIP code of 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and is open for response until August 3, 2026. The work demands a thorough understanding of federal cybersecurity mandates and the ability to operate within the stringent compliance framework established for defense contractors, with a sharp focus on continuous monitoring, control enforcement, and documentation integrity to meet DOD expectations for protecting Controlled Unclassified Information.