Cybersecurity Compliance & CUI Safeguarding (NIST SP 800-171)

The contract requires implementation and maintenance of NIST SP 800-171 controls to protect covered defense information in accordance with DFARS 252.204-7012, ensuring robust cybersecurity safeguards for Controlled Unclassified Information. This subcontract is under the Department of Defense’s Active Devices Division, with performance located in New Cumberland, Pennsylvania, and is subject to the NAICS code 541512, indicating it relates to computer systems design services. Compliance is mandatory and must be sustained throughout the contract lifecycle to meet federal cybersecurity standards for handling sensitive defense data. The solicitation was posted on July 19, 2026, with a response deadline of July 30, 2026, requiring timely submission of proposals demonstrating capability to meet all NIST SP 800-171 requirements. Contractors must be prepared to demonstrate full adherence to the 110 security controls across 14 families, including access control, audit, configuration management, and incident response, and must maintain continuous compliance through documentation, assessments, and reporting. Failure to meet these standards could result in contract termination or loss of eligibility for future DoD work.