Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for systems that process, store, or transmit Covered Defense Information, ensuring alignment with Cybersecurity Maturity Model Certification Level 2 requirements. This effort is critical to safeguarding sensitive government data and must be executed across all relevant platforms under the purview of the subcontractor, with adherence to federal cybersecurity standards and continuous monitoring to address evolving threats. The work is tied directly to supporting Department of Defense operations and must be completed in accordance with established federal guidelines for information assurance and risk management. The contract is issued as a subcontract under the ACTIVE DEVICES DIVISION, with performance location specified as New Cumberland, Pennsylvania, 17070-5002. It is classified under NAICS code 541512 for computer systems design services and was posted on May 31, 2026, with a mandatory response deadline of June 16, 2026. Although no set-aside designation is specified, the subcontractor must be prepared to demonstrate full compliance with NIST controls and CMMC Level 2 documentation, including policy development, access control, audit logging, incident response, and system integrity protection. Successful fulfillment will require proven experience in federal cybersecurity frameworks and the ability to sustain compliance through regular assessments and updates.