Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information and ensure compliance with DFARS requirements for cyber incident reporting. All systems handling controlled unclassified information must be configured and operated in accordance with the specified security controls to protect against unauthorized access, disclosure, or compromise. The contractor is responsible for identifying, documenting, and applying all relevant NIST controls across their information systems, maintaining continuous compliance throughout the contract period, and promptly reporting any cyber incidents as mandated by DFARS clause 252.204-7012. This is a subordinate contract under the Department of Defense, with performance expected at New Cumberland, Pennsylvania, 17070-5002. The solicitation falls under the NAICS code 541512 for computer systems design services and must be responded to by July 29, 2026. The contractor must demonstrate a clear understanding of CUI handling procedures, maintain audit-ready documentation of control implementation, and have the technical capability to detect, respond to, and report cybersecurity events in alignment with federal defense standards. Noncompliance will result in contractual breach and potential loss of eligibility for future DoD work.