Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and assessment of cybersecurity controls in alignment with NIST SP 800-171 to ensure compliance with federal standards for protecting controlled unclassified information. The work involves a formal evaluation under DFARS 252.240-7997, which mandates rigorous validation of security practices across the entire information system environment. In addition to control implementation, the contractor must develop and document a comprehensive incident response plan capable of detecting, reporting, and mitigating cybersecurity incidents in accordance with Department of Defense requirements. All activities are to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a strict deadline for proposal submission on August 13, 2026. This is a subcontract under the NAICS code 541512 for computer systems design services, issued by the Department of Defense through the Aviation Supply Chain organization.