Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards to protect covered defense information as mandated by DFARS 252.204-7012 and NIST SP 800-171, ensuring that all controlled unclassified information is handled in compliance with federal security standards. This includes the development and continuous updating of a System Security Plan, along with the prompt reporting of any cybersecurity incidents that may compromise the integrity, confidentiality, or availability of sensitive data. The contractor must establish robust controls to meet the specific requirements outlined in NIST SP 800-171, covering areas such as access control, audit, configuration management, and personnel security. This is a subcontract under the Department of Defense, solicited under NAICS code 541512 for computer systems design services, with performance expected to occur in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The contractor must demonstrate the capability to securely manage and protect controlled unclassified information throughout the lifecycle of the subcontracted services, adhering strictly to all applicable Defense Federal Acquisition Regulation Supplement provisions. Compliance is non-negotiable and failure to meet these requirements may result in contract termination or penalties.