Cybersecurity and Information Safeguarding (NIST 800-171 Compliance)

The contract requires the implementation of NIST SP 800-171 safeguarding controls to protect controlled unclassified information within defense contractor information systems. This includes developing and maintaining a comprehensive system security plan that aligns with federal requirements, ensuring all applicable security controls are properly documented, configured, and enforced across the organization’s IT infrastructure. The contractor must also establish and operationalize procedures for timely cyber incident reporting in accordance with NIST guidelines, ensuring rapid detection, response, and escalation of security events to federal authorities. This is a subcontract under the Department of Defense, specifically managed by the Active Devices Division, with performance required at New Cumberland, Pennsylvania, 17070-5002. The North American Industry Classification System code 541512 indicates the scope pertains to computer systems design and related services. The solicitation was posted on July 5, 2026, and responses are due by July 16, 2026. All work must comply fully with NIST SP 800-171 requirements, and failure to meet these standards could result in non-compliance penalties or termination of the subcontract.