Cybersecurity Compliance (NIST SP 800-171 / CUI)

The contract requires full implementation of cybersecurity safeguards for Covered Defense Information in accordance with DFARS 252.204-7012, mandating strict adherence to NIST Special Publication 800-171 controls to protect Controlled Unclassified Information. All systems and processes handling such data must be configured and operated to meet the comprehensive security requirements outlined in NIST 800-171, including access control, audit, configuration management, and incident response protocols. The contractor is obligated to report any cyber incident involving Covered Defense Information within 72 hours of discovery, providing full details and cooperating fully with remediation and investigative efforts as stipulated by federal regulations. This subcontract, issued by the Department of Defense’s Fluid Handling Division, is targeted for performance at New Cumberland, Pennsylvania with a zip code of 17070-5002. It falls under NAICS code 541611, indicating it relates to management, scientific, and technical consulting services. The solicitation was posted on July 21, 2026, and responses are due by July 24, 2026, requiring timely submission to comply with procurement timelines. Failure to meet these cybersecurity obligations will result in noncompliance and potential contract termination, requiring all parties to ensure immediate alignment with the mandated security standards and reporting procedures.