Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) within contractor information systems, ensuring full compliance with DFARS 252.204-7012 and Department of Defense assessment protocols. All systems handling CUI must be secured according to the specified framework, with a focus on safeguarding data integrity, confidentiality, and availability through documented, auditable security practices aligned with federal cybersecurity standards. The subcontract is tied to a specific performance location in Mechanicsburg, Pennsylvania, with a zip code of 17050-2411, and is categorized under NAICS code 541512, indicating its alignment with computer systems design services. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, and is issued under the Department of Defense through the Land Supplier Ops Vehicle Spt organization. Although no set-aside designation or point of contact is provided, all offerors must demonstrate the capability to meet the full scope of CUI protection requirements and be prepared to undergo DOD-mandated assessments to verify compliance. The contract does not specify pricing or scope beyond security implementation, but adherence to the outlined controls is mandatory for contract award and continued performance.