Cybersecurity Compliance and CDI Safeguarding

This contract involves the implementation and evaluation of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with cyber incident reporting requirements. The work is scoped as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. The contractor must fully align with the NIST framework to establish, maintain, and verify protective measures that secure sensitive defense data against unauthorized access, disclosure, or compromise. All activities must support the timely detection, reporting, and response to cybersecurity incidents in accordance with federal defense standards. The solicitation is open for response until July 29, 2026, with proposals due by 5:00 PM Eastern Time. The NAICS code 541611 indicates this is a professional, scientific, and technical services contract focused on administrative management and general management consulting services related to cybersecurity. The contract does not specify a set-aside status, meaning it is open to all qualified entities. Compliance with NIST SP 800-171 is non-negotiable, and the successful bidder must demonstrate proven capability in deploying and assessing these controls, as well as providing documentation and evidence of ongoing adherence to federal cybersecurity guidelines for defense information systems.