Cybersecurity & NIST SP 800-171 Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard controlled unclassified information within nonfederal systems, ensuring alignment with Department of Defense cybersecurity standards. It mandates full compliance with DFARS 252.204-7012, which includes establishing policies and procedures for protecting covered defense information, conducting regular assessments, and promptly reporting cyber incidents in accordance with DOD guidelines. The contractor must be prepared to undergo a formal DOD assessment, demonstrating readiness through documented controls, system configurations, and incident response capabilities. Performance is centered at New Cumberland, Pennsylvania, with the work classified as a subcontract under NAICS code 541512 for computer systems design services. The solicitation was posted on July 6, 2026, and responses are due by July 14, 2026. The contracting activity falls under the ASC Commodities Division of the Department of Defense, requiring strict adherence to federal cybersecurity frameworks and accountability for maintaining the integrity, confidentiality, and availability of sensitive information throughout the contract lifecycle.