Cybersecurity Compliance and NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard covered defense information and ensure full compliance with DFARS requirements for technical data and reporting. The scope centers on establishing a robust security posture aligned with federal standards to protect sensitive information handled within the contractor’s systems and processes. This includes adhering to all 110 controls outlined in NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, and incident response, with continuous monitoring and documentation to demonstrate compliance. This is a subcontract under a Total Small Business Set-Aside, meaning only small businesses are eligible to respond, and it is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026. Performance will take place in New Cumberland, Pennsylvania, at a zip code of 17070-5002. The contracting activity is managed by the Active Devices Division under the Department of Defense, and the submission must be made through the DIBBS platform using the specified solicitation number SPE7M526T340T. Compliance is mandatory and will be rigorously evaluated as a condition of contract award and performance.