Cybersecurity for Controlled Unclassified Information (CUI)

The contract requires the implementation of cybersecurity controls for systems handling Controlled Unclassified Information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring compliance with federal standards for protecting sensitive but unclassified data. This subcontract is part of a Department of Defense initiative managed by the Construction & Equipment T & IFO EQ organization, with performance required at a designated location in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation falls under NAICS code 541512, indicating it relates to computer systems design services, and targets contractors capable of deploying, managing, and maintaining technical safeguards aligned with the established cybersecurity framework. The opportunity was posted on July 27, 2026, and responses are due by August 7, 2026, providing a narrow window for submission. All entities bidding must demonstrate the ability to fully comply with the NIST 800-171 requirements, which encompass 14 families of security controls including access control, audit, configuration management, and incident response, as mandated by DFARS to protect CUI. The absence of set-aside designation means this is open to all eligible contractors without preference for small businesses or other categories, and the submission must be made through the specified DIBBS portal linked in the posting. Compliance is non-negotiable, and failure to meet these standards will result in rejection of the proposal or termination of any resulting award.