Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires implementation, assessment, and documentation of NIST SP 800-171 security controls to protect covered defense information, with all findings and compliance status to be formally submitted to the Supplier Performance Risk System. The work must align with federal cybersecurity standards for contractors handling sensitive defense data, ensuring controls are properly configured, tested, and recorded in accordance with NIST guidelines. All deliverables must be completed and reported by the response deadline of August 10, 2026, to meet contractual obligations and maintain eligibility for future work. This subcontract is issued under the Department of Defense’s Fluid Handling Division, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The task falls under NAICS code 541611, indicating it involves management, scientific, and technical consulting services focused specifically on cybersecurity compliance. The solicitation was posted on July 30, 2026, and responses must be submitted through the DIBBS portal prior to the deadline, with no set-aside provisions specified, meaning all eligible entities may compete.