Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across all systems that handle Covered Unclassified Information, ensuring full compliance with federal cybersecurity standards for protected defense data. The contractor must conduct a self-assessment of their security posture in accordance with NIST guidance and promptly report any cyber incidents as mandated by DFARS clauses, maintaining visibility and accountability throughout the lifecycle of the contract. The work must be performed at the designated location in New Cumberland, Pennsylvania, with all systems and processes aligned to safeguard Controlled Unclassified Information from unauthorized access, disclosure, or compromise. This is a Total Small Business Set-Aside subcontract under NAICS code 541512, reserved exclusively for small business entities, issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. Responses are due by July 22, 2026, and the solicitation was posted on July 14, 2026, with all compliance activities subject to strict timelines and regulatory requirements. The contractor will be expected to demonstrate continuous adherence to cybersecurity protocols, provide documentation of control implementation, and maintain readiness for audit or review by government authorities, with no tolerance for deviations from the required standards.