Defense-Compliant Cybersecurity for Information Systems

The contract requires the implementation and maintenance of cybersecurity controls for information systems that handle Controlled Unclassified Information, in full compliance with DFARS 252.204-7008 and the security requirements outlined in NIST SP 800-171. The work is scoped to ensure that all systems, processes, and personnel involved meet the mandatory standards for protecting CUI against unauthorized access, disclosure, and compromise. This includes conducting risk assessments, applying access controls, conducting continuous monitoring, managing system updates, and documenting compliance measures to support audits and assessments by the Department of Defense. This is a subcontract classified as a Total Small Business Set-Aside under FAR 19.5, reserved exclusively for small businesses as defined by the Small Business Administration. The North American Industry Classification System code is 541512, indicating it pertains to custom computer programming services, suggesting the need for tailored cybersecurity solutions and technical implementation. The performance location is specified as New Cumberland, PA, with a zip code of 17070-5002. The solicitation was posted on July 16, 2026, and responses must be submitted by July 24, 2026, with the contracting activity managed by the ASC Supplier Oper OEM Division under the Department of Defense.