Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within contractor systems, ensuring alignment with federal cybersecurity standards for handling sensitive but unclassified data. The work is focused on achieving full compliance with these controls to prepare for Department of Defense cybersecurity assessments, which will evaluate the contractor’s ability to protect CUI through technical, administrative, and physical safeguards. All systems and processes involved must be configured, documented, and auditable to meet the precise requirements outlined in the NIST framework. This is a small business set-aside subcontract under NAICS code 541512, reserved exclusively for total small businesses as defined by the SBA. The performance location is specified as New Cumberland, Pennsylvania, with a ZIP code of 17070-5002, and the contracting activity is tied to the Department of Defense’s DDSP New Cumberland Facility. The solicitation was posted on July 15, 2026, and responses are due by July 27, 2026, indicating a tight timeline for submission and evaluation. The contractor must be prepared to demonstrate compliance readiness, maintain detailed documentation of control implementation, and be capable of undergoing formal DoD cyber evaluations without delay.