Cybersecurity Compliance and Reporting

The contract requires the execution of comprehensive cybersecurity assessments to evaluate the security posture of systems handling Controlled Unclassified Information, with a focus on achieving and maintaining compliance with NIST SP 800-171 Rev 1 standards. This includes the development and documentation of complete System Security Plans that align with federal requirements, ensuring all technical, operational, and managerial controls are properly implemented and documented. The contractor must also manage ongoing reporting obligations through the Supplier Performance Risk System, providing accurate and timely data to demonstrate compliance status and remediation efforts. The work is scoped to support systems located at the DOD facility in New Cumberland, Pennsylvania, with performance tied directly to federal cybersecurity mandates governing CUI protection. As a subcontract under the Department of Defense, the effort is governed by the NAICS code 541611 for management consulting services related to administrative and general management. The solicitation window is limited, with responses due by July 27, 2026, and all activities must be conducted to meet the strict deadlines and compliance expectations mandated by the contracting activity.