Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and documentation of cybersecurity safeguards in strict alignment with NIST SP 800-171 and DFARS 252.204-7012 to ensure the protection of controlled unclassified information, including hazard data, shipping documents, and contract metadata. All security controls must be fully documented and maintained to meet federal requirements for safeguarding sensitive but unclassified data handled by subcontractors working with the Department of Defense. Compliance is mandatory and must be actively demonstrated through technical and procedural measures that address access control, audit and accountability, configuration management, identification and authentication, personnel security, physical protection, risk assessment, system and communications protection, and incident response. Performance of this subcontract is tied to the location of New Cumberland, Pennsylvania, with a response deadline of July 20, 2026, and the solicitation was posted on July 15, 2026. The project falls under NAICS code 541512, which classification indicates it is related to computer systems design services. The contracting entity is the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, and successful bidders must be prepared to operate within the defense supply chain with full accountability for securing CUI throughout its lifecycle. There is no specific set-aside designation, and the work is expected to be performed by a subcontractor supporting a larger defense contract.