Cybersecurity Compliance and CUI Safeguarding (System Security Plan Development)

The contract requires the development and ongoing maintenance of a System Security Plan and Plan of Action and Milestones to ensure full compliance with NIST SP 800-171 Rev 1 and DFARS 252.204-7012 standards for safeguarding Controlled Unclassified Information. This includes the accurate submission of security assessment results to the Supplier Performance Risk System and the timely reporting of any cybersecurity incidents involving CUI. The work is focused on establishing robust security controls, documenting remediation efforts, and maintaining continuous compliance throughout the contract lifecycle. All activities must align with Department of Defense requirements for protecting sensitive information processed or stored by the contractor. Performance is to be carried out at a designated location in New Cumberland, Pennsylvania, with a response deadline of August 4, 2026. The solicitation is issued as a subcontract under NAICS code 541512, indicating it involves computer systems design services. While no specific set-aside designation is noted, the effort is tied to a broader defense supply chain initiative managed by the Land Supply Chain organization under the Department of Defense. The contractor must ensure all documentation, reporting, and mitigation activities meet federal cybersecurity standards without deviation, with ongoing vigilance required to address evolving threats and compliance updates.