Cybersecurity Safeguarding for Controlled Unclassified Information (CUI)

The contract requires the implementation and maintenance of NIST SP 800-171 security controls to ensure the protection of Controlled Unclassified Information (CUI) within non-classified contractor systems. This effort is critical for safeguarding sensitive data handled by the Department of Defense’s Fluid Handling Division, ensuring compliance with federal cybersecurity standards to mitigate risks associated with unauthorized access, disclosure, or compromise. The contractor must align all relevant systems, processes, and personnel practices with the full scope of NIST SP 800-171 requirements, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response. The work is to be performed at a specific location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the nature of the contract is classified as a subcontract under NAICS code 541512, which corresponds to computer systems design and related services. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026, indicating a narrow window for proposal submission. Although no set-aside designation or point of contact is provided, the contract is accessible through the DIBBS platform, and successful respondents must be prepared to demonstrate not only technical capability to enforce the required controls but also sustained compliance over the life of the subcontract.