Cybersecurity and Information Safeguarding (NIST SP 800-171 Compliance)

The contract focuses on implementing and assessing cybersecurity controls to safeguard covered defense information in full alignment with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement (DFARS) requirements. It requires the contractor to establish, validate, and maintain a robust cybersecurity framework that meets federal standards for protecting controlled unclassified information within nonfederal systems. Compliance with all 110 security requirements outlined in NIST SP 800-171 is mandatory, and the contractor must demonstrate through documentation, testing, and audits that these controls are effectively deployed and continuously monitored. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance required at the facility located in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, categorized under NAICS code 541512 for Computer Systems Design Services, is open for responses until July 23, 2026, with proposals due by 5:00 PM Eastern Time. The contract emphasizes adherence to federal cybersecurity standards and expects full operational readiness to handle sensitive defense information securely, with no set-aside provisions specified. All activities must be performed in accordance with applicable DoD directives and reporting obligations tied to cybersecurity posture and incident response capabilities.