Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires implementation and maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect controlled unclassified information within the contractor’s systems, with full compliance mandated under DFARS 252.204-7012. This includes establishing and sustaining technical, administrative, and physical safeguards to meet all 110 controls outlined in the NIST framework, ensuring continuous readiness for audit and assessment. The contractor must also establish and operate procedures for timely detection, reporting, and documentation of cyber incidents involving covered defense information, including providing all required details to the Department of Defense within 72 hours of discovery. The work is performed under a subcontract classified under NAICS code 541512 for computer systems design services, with performance centered at the facility in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The contracting entity is the Fluid Handling Division within the Department of Defense. Full compliance with NIST and DFARS requirements is non-negotiable, and failure to meet these obligations may result in contract termination, financial penalties, or loss of eligibility for future DoD work. The subcontractor must demonstrate proven experience with NIST SP 800-171, incident response protocols, and audit readiness to qualify for award.