Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation of comprehensive cybersecurity controls to safeguard Controlled Unclassified Information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring all applicable requirements are met to protect sensitive data processed or stored by the contractor. This includes conducting a self-assessment for CMMC Level 2 compliance, verifying that organizational policies, technical safeguards, and operational procedures align with federal standards for cybersecurity maturity and risk management. The effort is focused on establishing a robust and auditable security posture capable of defending against cyber threats targeting CUI within the Department of Defense supply chain. The work is to be performed at the place of performance in New Cumberland, Pennsylvania, with a response deadline of August 3, 2026, and the solicitation is categorized as a subcontract under NAICS code 541512, which pertains to computer systems design services. The contracting activity is under the ASC Commodities Division of the Department of Defense, indicating this effort supports critical defense logistics functions. All activities must be completed in a manner that ensures continuous compliance with federal cybersecurity mandates, and the contractor is expected to document controls, maintain evidence of implementation, and prepare for potential assessment or audit by government representatives.