Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information within non-federal systems, ensuring adherence to the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012 and the Federal Acquisition Regulation clause FAR 52.204-21. This obligation encompasses securing systems, networks, and data against unauthorized access, disclosure, or compromise, with specific focus on CUI handling, access controls, audit logging, incident reporting, and continuous monitoring to meet federal compliance standards. The subcontract is associated with the Department of Defense under the agency name LAND SUPPLY CHAIN and is tied to NAICS code 541512 for computer systems design services. Performance is required at the location in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026. Full compliance with all NIST 800-171 requirements and regulatory obligations is mandatory, and failure to implement or maintain the necessary controls may result in contract termination or financial penalties.