Cybersecurity Compliance for CUI (Controlled Unclassified Information)

The contract requires the implementation of baseline cybersecurity safeguards for information systems that may process, store, or transmit Controlled Unclassified Information, in alignment with the Defense Federal Acquisition Regulation Supplement and the National Institute of Standards and Technology Special Publication 800-171. This subcontract is aimed at ensuring that all contractor systems meet minimum security controls to protect CUI from unauthorized access, disclosure, or compromise, with compliance being a mandatory requirement for performance. The work is to be performed at the New Cumberland facility with a zip code of 17070-5002, under the oversight of the Department of Defense’s DDSP New Cumberland Facility, and is classified under NAICS code 541512 for computer systems design services. Proposals must be submitted by the deadline of July 20, 2026, and the solicitation was released on July 9, 2026. The contract is issued as a subcontract with no specific set-aside designation, meaning it is open to eligible small businesses and large businesses alike, provided they can demonstrate adherence to the required cybersecurity standards. The place of performance is fixed and no remote or alternate locations are indicated. All parties interested in bidding must access the solicitation through the specified DIBBS portal link to obtain full details and submit responses. Compliance with NIST SP 800-171 controls will be subject to assessment and verification as part of contract fulfillment.