Cybersecurity & NIST SP 800-171 Compliance Support

The contract requires comprehensive support to ensure full compliance with NIST Special Publication 800-171 and DFARS clause 252.204-7012, focusing on the assessment of current systems, implementation of required security controls, and development of a Plan of Actions and Milestones to address gaps. The work must be performed in New Cumberland, Pennsylvania, with a tight response deadline of August 7, 2026, and is structured as a subcontract under the Department of Defense’s ASC Supplier Oper AE and AF Division. The North American Industry Classification System code 541512 indicates this effort falls under Computer Systems Design Services, emphasizing the technical and advisory nature of the tasks involved. The solicitation targets contractors with demonstrated expertise in federal cybersecurity frameworks, requiring proven ability to assess and remediate systems to meet stringent DoD standards. Performance is location-specific and must align with NIST’s control families covering access control, audit, configuration management, identification and authentication, and incident response. The contractor is expected to deliver actionable, documented outcomes including detailed POA&Ms that track progress toward full compliance, and must do so within the narrow window between posting and response deadlines, indicating urgency in addressing existing security deficiencies within DoD supply chain systems.