Basic Safeguarding of Contractor Information Systems

The contract requires the implementation of NIST SP 800-171 baseline cybersecurity controls to safeguard contractor information systems that handle federal contract information, with specific focus on access control, data protection, and continuous system monitoring. This effort is mandatory for ensuring compliance with federal security standards and applies to all systems processing, storing, or transmitting sensitive government data under the subcontract. The work must be performed at the designated location in New Cumberland, Pennsylvania, with ZIP code 17070-5002, and aligns with the NAICS code 541512 for computer systems design services. The solicitation was posted on July 5, 2026, and responses are due by July 16, 2026, with the contracting agency identified as the Department of Defense through its DDSP New Cumberland Facility. The agreement is structured as a subcontract and does not include a set-aside designation, meaning it is open to all eligible parties without preference based on business size or category. The required cybersecurity measures must be fully integrated into operational systems to meet federal compliance requirements, and performance must be demonstrated through documented controls, audit readiness, and adherence to NIST guidelines without reliance on external documentation for validation.