Cybersecurity Compliance & CUI Safeguarding

The contract requires implementation and assessment of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information across all applicable systems and processes. This includes establishing, maintaining, and verifying compliance with the full spectrum of security requirements outlined in the NIST publication, with a focus on safeguarding CUI from unauthorized access, disclosure, or modification. The contractor must also support prompt and accurate cyber incident reporting in accordance with DFARS regulations, ensuring timely detection, documentation, and notification of any security breaches or anomalies affecting covered information systems. The work is performed under a subcontract with a place of performance in New Cumberland, Pennsylvania, 17070-5002, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 9, 2026, with a response deadline of July 14, 2026, and is issued by the Department of Defense through the DDSP New Cumberland Facility. Compliance with these cybersecurity standards is mandatory, and successful performance will require demonstrated expertise in NIST frameworks, CUI handling procedures, and DFARS reporting obligations.