Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires comprehensive cybersecurity compliance services to support NIST SP 800-171 assessment and implementation for the protection of controlled unclassified information in alignment with DFARS requirements. The work is focused on ensuring that systems and processes meet the necessary security controls to safeguard CUI, with an emphasis on achieving full compliance through documentation, evaluation, and remediation activities. This subcontract is designated as a total small business set-aside under the SBA program, indicating priority for small business concerns to perform the work, and falls under NAICS code 541512 for computer systems design services. Performance is required at the New Cumberland facility with a ZIP code of 17070-5002, and all deliverables must be completed by the response deadline of August 3, 2026. The contracting activity is the Department of Defense through the DDSP New Cumberland Facility, and the effort is part of a broader initiative to enforce defense supply chain cybersecurity standards. Successful contractors will demonstrate technical expertise in NIST 800-171 frameworks, experience with DFARS compliance, and the ability to deliver audit-ready documentation and implementation support for controlled unclassified information environments.