Cybersecurity Compliance for CUI Safeguarding

This contract requires the contractor to fully comply with NIST SP 800-171 and DFARS 252.204-7012 to ensure the protection of Controlled Unclassified Information, with specific emphasis on implementing robust access controls for systems used to interface with WAWF and DIBBS. The contractor must establish and maintain a security posture that meets federal cybersecurity standards for handling, storing, and transmitting CUI, including the implementation of required administrative, technical, and physical safeguards. Compliance is mandatory throughout the performance period, with ongoing monitoring and documentation to demonstrate adherence. The contract is a small business set-aside under the SBA’s Total Small Business Set-Aside program, with a NAICS code of 541512, indicating it is scoped for IT services and cybersecurity consulting. Performance is required at the location in New Cumberland with a zip code of 17070-5002, and responses must be submitted by August 17, 2026. The contract is issued under the Department of Defense, specifically through the ASC SUPPLIER OPER AE AND AF DIV, and utilizes the DIBBS platform for solicitation and management purposes. All systems and processes must be configured to meet the stringent requirements for CUI protection, with no exceptions permitted for non-compliant environments.