Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across systems and operations, ensuring full compliance with federal cybersecurity standards. This includes the development and maintenance of a Plan of Actions and Milestones to address identified gaps, track remediation efforts, and demonstrate ongoing progress toward full compliance. All activities must be documented and reported through the Wide Area WorkFlow system to meet federal reporting requirements and ensure transparency in cybersecurity posture improvements. The work is to be performed at the designated location in New Cumberland, Pennsylvania, under a subcontract issued by the Department of Defense’s ASC Commodities Division. The solicitation was posted on August 9, 2026, with responses due by August 17, 2026, and the North American Industry Classification System code 541512 applies, indicating the nature of the services involves computer systems design and related activities. The contractor is expected to possess the technical expertise to assess current security environments, execute control enhancements, and sustain compliance through regular monitoring and accurate documentation within the specified timeframe and location.