Cybersecurity Compliance & CUI Safeguarding

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 compliance to ensure the proper safeguarding of Controlled Unclassified Information across all applicable systems and environments. The scope includes conducting thorough system assessments to validate adherence to the specified security controls, documenting findings, and promptly reporting any security incidents in accordance with federal requirements. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a specific focus on establishing and sustaining a secure, compliant infrastructure that protects sensitive government data from unauthorized access, disclosure, or compromise. The solicitation is structured as a subcontract under a Total Small Business Set-Aside, meaning only small business concerns are eligible to respond, as defined by the SBA. It falls under NAICS code 541512, which pertains to computer systems design and related services, indicating the need for specialized expertise in cybersecurity architecture and compliance management. The opportunity was posted on August 5, 2026, with responses due by August 13, 2026, and is managed by the ASC Supplier Oper OEM Division under the Department of Defense. All work must align with federal standards for CUI handling, ensuring continuous compliance through proactive monitoring, documentation, and incident response protocols.