Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard covered defense information across all relevant systems. This includes hardening system configurations, enforcing strict access controls, and ensuring all security measures align with federal cybersecurity standards for protecting sensitive defense data. The work involves a formal evaluation process to document compliance, identify gaps, and deliver detailed assessment reports that verify adherence to the required controls. Performance is expected to be conducted at the specified location in New Cumberland, Pennsylvania, with a response deadline of August 10, 2026, and the solicitation was posted on July 30, 2026. This is a subcontract under the Department of Defense, classified under NAICS code 541512 for computer systems design services, and the focus is on achieving full compliance with NIST guidelines to meet defense contracting requirements. All activities must be completed within the scope of protecting covered defense information through robust, measurable, and auditable cybersecurity practices.