Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 cybersecurity compliance assessment and associated activities to ensure adherence to federal information security standards. Key tasks include conducting a thorough evaluation of system controls, implementing system hardening measures, establishing robust access controls, and developing a System Security Plan and Plan of Action and Milestones to document and remediate identified deficiencies. The contractor must also ensure readiness for incident reporting, including the capability to detect, respond to, and report security incidents in accordance with applicable federal requirements. All work must be performed to meet the specific compliance objectives outlined in NIST SP 800-171, with a focus on protecting controlled unclassified information within the system environment. This subcontract is solicited by the Department of Defense’s Fluid Handling Division, with performance required at a location in New Cumberland, Pennsylvania, ZIP code 17070-5002. The opportunity is categorized under NAICS code 541512 for Computer Systems Design Services and is open for responses until August 10, 2026. The solicitation was posted on July 30, 2026, and interested parties must submit their proposals by the stated deadline. While details regarding the point of contact and set-aside status are not provided, the emphasis is squarely on delivering a fully compliant, secure, and documented cybersecurity posture aligned with NIST standards for Department of Defense systems.