Cybersecurity Compliance for Controlled Technical Data

The contract requires compliance with NIST SP 800-171 to protect Controlled Unclassified Information within systems handling contract data, with a focus on assessment, documentation, and implementation of required security controls. All systems processing, storing, or transmitting sensitive technical data must meet the full suite of security requirements outlined in the NIST framework, ensuring robust safeguarding practices are in place and routinely verified. Failure to demonstrate adherence may result in non-compliance and contract termination. This is a subcontract under a Women-Owned Small Business Set-Aside, identified by NAICS code 541512 for Custom Computer Programming Services, and is managed by the Department of Defense under the agency name CONSTRUCTION & EQUIPMENT MANU & CON. The place of performance is designated as New Cumberland, PA, with a zip code of 17070-5002. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026. Contractors must submit proposals through the DIBBS portal at the provided link, ensuring all cybersecurity measures are fully documented and auditable to meet federal standards.