Cybersecurity Compliance for CUI Handling

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information within contractor systems, strictly adhering to the standards outlined in NIST Special Publication 800-171. This subcontract is focused on ensuring all systems handling CUI meet federal cybersecurity requirements, covering areas such as access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, system and communications protection, and system and information integrity. Compliance is mandatory and must be continuously verified throughout the contract period. The work is performance-based and centered at New Cumberland, Pennsylvania, with a zip code of 17070-5002, and falls under the NAICS code 541512, indicating it involves custom computer programming services. The solicitation was posted on August 4, 2026, and responses are due by August 17, 2026, giving potential bidders a two-week window to submit proposals. The contract is managed by the Fluid Handling Division under the Department of Defense and is issued through the DLA BSM platform under solicitation number SPE7M326T7831. No set-aside preferences are specified, making it open to all eligible contractors who can demonstrate full compliance with NIST SP 800-171 requirements.