Cybersecurity Compliance and NIST 800-171 Assessment

The contract requires the execution of a comprehensive cybersecurity compliance initiative centered around NIST SP 800-171 assessment, implementation of DFARS 252.204-7012 and 252.240-7997 requirements, and the development of a fully compliant System Security Plan and Plan of Action & Milestones. The work aims to ensure that information systems handling controlled unclassified information meet federal cybersecurity standards as mandated by the Department of Defense. The contractor must conduct a thorough evaluation of current security controls, identify gaps against NIST 800-171 requirements, and implement necessary technical, administrative, and physical safeguards to achieve compliance. Documentation deliverables must be complete, accurate, and aligned with DoD expectations for accountability and continuous monitoring. This subcontract is tied to the LSO Combat Vehicles and Armament organization under the Department of Defense, with performance expected to occur at New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on August 2, 2026, with a response deadline of August 13, 2026, indicating a tight timeline for proposal submission. The NAICS code 541512 categorizes this effort under Computer Systems Design Services, reflecting the need for specialized technical expertise in cybersecurity architecture and compliance management. The scope demands not only assessment capabilities but also the ability to execute remediation activities and produce formally accepted security documentation, requiring a vendor with proven experience in defense-oriented cybersecurity frameworks and contract compliance.