Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract requires the provision of advisory and managed cybersecurity services to ensure the prime contractor’s systems meet the requirements of NIST Special Publication 800-171 for protecting covered defense information. This includes conducting comprehensive audits of existing security controls, developing and maintaining detailed documentation to demonstrate compliance, and preparing Plans of Action and Milestones to address identified gaps and remediate deficiencies. The services must support ongoing adherence to federal standards governing the safeguarding of sensitive information within defense systems. The work is positioned as a subcontract under the Department of Defense, specifically for the DDSP New Cumberland Facility, with performance expected to occur in New Cumberland, Pennsylvania, 17070-5002. The solicitation falls under NAICS code 541512 for Computer Systems Design Services and is targeted for response by July 20, 2026. Although no set-aside designation is specified, the requirement is part of a broader effort to enforce cybersecurity compliance across the defense industrial base, with all deliverables focused on achieving and sustaining NIST SP 800-171 alignment through continuous assessment and documentation.