Cybersecurity Compliance for CUI Handling (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) throughout the manufacturing, inspection, and logistics processes, in full alignment with NIST SP 800-171 standards. This subcontract mandates strict adherence to federal cybersecurity requirements designed to protect sensitive data handled by defense contractors, ensuring that all systems, networks, and procedures meet the necessary safeguarding criteria. Performance is specifically tied to operations at the facility located in New Cumberland, Pennsylvania, with the ZIP code 17070-5002 as the designated place of performance. The solicitation, issued under NAICS code 541512 for Computer Systems Design Services, is managed by the ASC Commodities Division within the Department of Defense and is open for response until August 11, 2026. Contractors must demonstrate proven capabilities in deploying and validating NIST 800-171 controls, including access control, audit and accountability, configuration management, and incident response, among others. All work must be completed in a manner that ensures continuous protection of CUI, with rigorous documentation and assessment procedures required to verify compliance. Participation is open to eligible subcontractors responding to the DIBBS platform posting, and bidders are expected to provide detailed plans for control implementation, ongoing monitoring, and evidence of compliance during the contract term.