Compliance with NIST SP 800-171 and Basic Safeguarding

The contract requires strict adherence to NIST SP 800-171 security controls to ensure the proper protection of controlled unclassified information (CUI) held or processed by the contractor. Basic safeguarding requirements must be fully implemented to meet federal standards for information security, focusing on confidentiality, integrity, and availability of CUI throughout the subcontract lifecycle. Compliance is non-negotiable and must be demonstrated through documented policies, technical controls, and operational practices aligned with NIST guidelines. This subcontract, issued by the Department of Defense’s Active Devices Division, is tied to the NAICS code 541512 and performance will occur in New Cumberland, PA, with a zip code of 17070-5002. The solicitation was posted on July 9, 2026, and responses are due by July 20, 2026. The contract is not subject to any specific set-aside classification and is intended for entities capable of meeting the rigorous cybersecurity expectations outlined by federal regulations. All parties must maintain continuous compliance and be prepared to provide evidence of control implementation upon request.