Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect Controlled Unclassified Information (CUI) specifically related to the design or manufacturing of shackles. Key responsibilities include the development and maintenance of a System Security Plan (SSP) and procedures for incident reporting to ensure compliance with federal cybersecurity requirements. The contract is issued as a subcontract under NAICS code 541512, focusing on cybersecurity services within the scope of defense-related information protection. The Department of Defense, through the ASC Supplier OEM Division, is overseeing this effort with performance expected in New Cumberland, Pennsylvania. Responses to the solicitation are due by May 19, 2026, following the posting date of May 11, 2026. This contract highlights the critical importance of safeguarding sensitive defense information through strict adherence to established cybersecurity frameworks, emphasizing the contractor's role in maintaining the confidentiality, integrity, and availability of the protected data throughout the contract lifecycle.