Cybersecurity and Information Safeguarding Compliance

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information on systems that handle government data, ensuring strict adherence to cybersecurity standards mandated for defense contractors. All systems must be configured to meet the framework's requirements for access control, awareness and training, audit and accountability, configuration management, identification and authentication, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, system and communications protection, and system and information integrity. Compliance with cyber incident reporting obligations is mandatory, meaning any security breach or anomaly must be detected, documented, and reported to the appropriate government authority within the required timeframes. This is a subcontract under the Department of Defense, specifically associated with the DDSP NEW CUMBERLAND FACILITY, with performance expected at the location in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation is categorized under NAICS code 541512, reflecting information technology and related services. The opportunity was posted on August 5, 2026, with responses due by August 17, 2026. While no set-aside designation is specified, potential offerors must demonstrate proven capability in executing NIST 800-171 compliance programs and have experience managing cyber incident reporting workflows for federal systems. All work must align with DoD expectations for safeguarding sensitive data and maintaining operational cybersecurity readiness.