Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires the implementation of cybersecurity safeguards outlined in NIST Special Publication 800-171 to protect Controlled Unclassified Information (CUI) on systems supporting the Department of Defense’s ASC Commodities Division. Compliance with FAR 52.204-21 is mandatory, ensuring that all contractors and subcontractors handling CUI adhere to a standardized set of security requirements designed to defend against unauthorized access, disclosure, and compromise. The work is to be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and must be completed by the response deadline of July 24, 2026. This is a subcontract under the NAICS code 541519, which covers other computer-related services, indicating that the focus is on specialized cybersecurity implementation rather than general IT support. The solicitation is publicly accessible through the DIBBS platform, and all parties involved must demonstrate full alignment with federal cybersecurity protocols prior to contract award.