Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information on systems handling sensitive DoD data. This includes developing a System Security Plan, conducting regular assessments to validate compliance with the NIST framework, and establishing procedures for timely cyber incident reporting as mandated by DFARS regulations. All activities must be performed in accordance with federal cybersecurity standards to ensure the protection of controlled unclassified information. The work is scoped as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at a designated location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, posted on July 21, 2026, has a response deadline of July 29, 2026, and is classified under NAICS code 541512 for computer systems design services. Compliance with all contractual cybersecurity obligations is mandatory, and the successful bidder must demonstrate proven capability in executing NIST 800-171 controls and DFARS reporting requirements under a subcontractual arrangement.