Cybersecurity Compliance and NIST SP 800-171 Implementation

This subcontract focuses on ensuring compliance with NIST SP 800-171 standards for the protection of Covered Defense Information (CDI). The work involves the development of a System Security Plan (SSP), conducting self-assessments, and performing Supplier Performance Risk System (SPRS) reporting in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) clauses. The primary goal is to assist the Department of Defense's ASC Supplier Operations AE and AF Division in meeting cybersecurity requirements to safeguard sensitive defense information. The contract, titled "Cybersecurity Compliance and NIST SP 800-171 Implementation," falls under NAICS code 541512, which encompasses computer systems design services. The place of performance is located in New Cumberland, with the ZIP code 17070-5002. The contract was posted on May 13, 2026, with a response deadline of May 21, 2026. It is designated as a subcontract, though details regarding set-asides or specific organization types are not provided. This opportunity supports the Department of Defense’s ongoing efforts to enhance cybersecurity posture in its supply chain.