Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all applicable systems. This includes establishing robust access controls, conducting regular system assessments to ensure compliance, and enforcing strict cyber incident reporting protocols that mandate notification within 72 hours of discovery. The work must be performed at the specified location in New Cumberland, Pennsylvania, with a focus on sustaining continuous compliance in alignment with Department of Defense requirements. This subcontract, solicited under NAICS code 541512 for Computer Systems Design Services, is issued by the Active Devices Division under the Department of Defense and is open for responses until July 9, 2026. Proposals must demonstrate proven capability in executing NIST 800-171 controls, managing CUI protections, and responding rapidly to cybersecurity incidents. While no set-aside designation is specified, bidders are expected to meet all federal cybersecurity standards and operational demands tied to defense-related information systems.