Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information (CUI) and ensure readiness for Department of Defense cybersecurity assessments. The work involves full compliance with the security requirements outlined in NIST Special Publication 800-171, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response, all aimed at protecting CUI within contractor systems. The goal is to establish a secure environment that meets DoD standards for handling sensitive but unclassified information and to pass any associated cybersecurity evaluations conducted by the government. This is a subcontract under the NAICS code 541512 for information technology services, with performance to be carried out at the designated location in New Cumberland, Pennsylvania, 17070-5002. The contract was posted on August 4, 2026, and responses are due by August 17, 2026. The procuring agency is the Department of Defense through its LAND SUPPLY CHAIN office, indicating the effort supports logistics or supply chain security initiatives. Participation requires proven capability in cybersecurity compliance, documented experience with NIST controls, and the ability to undergo and pass official DoD assessment processes without delay or deviation from established protocols.