Cybersecurity Compliance & Incident Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 to safeguard Covered Defense Information and Controlled Unclassified Information. This includes establishing, monitoring, and enforcing technical and administrative safeguards to meet federal requirements for protecting sensitive data within the defense supply chain. All activities must ensure continuous compliance with the prescribed controls, including timely detection, reporting, and response to cybersecurity incidents involving CDI or CUI, with clear protocols for escalation and documentation. Performance is tied to a specific location in New Cumberland, PA, and the work falls under the NAICS code 541512 for computer systems design services. As a subcontract, this effort supports a broader federal initiative under the Department of Defense, with a response deadline of August 3, 2026. Compliance is non-negotiable, and the contractor must demonstrate capability to conduct regular assessments, maintain detailed records, and provide evidence of adherence to NIST standards throughout the contract term.