Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 security controls to ensure the protection of controlled unclassified information within covered systems. This includes the development of a comprehensive System Security Plan that documents the security posture, controls in place, and risk management strategies aligned with NIST guidelines. The contractor must also establish and maintain procedures for timely cyber incident reporting in accordance with federal requirements, ensuring rapid detection, response, and notification of security breaches or anomalies. All work must be performed at the specified place of performance in New Cumberland, Pennsylvania, with a tight submission window closing on August 4, 2026. This is a subcontract under the Department of Defense, categorized under NAICS code 541512 for computer systems design services, and is aimed at enhancing cybersecurity posture across defense-related operations. The contract mandates strict adherence to federal cybersecurity standards, with no set-aside provisions specified, and the focus is on delivering compliant, auditable security infrastructure. The entity responsible must demonstrate proven capability in NIST 800-171 implementation, SSP development, and incident response protocols, with all deliverables tied to meeting DoD cybersecurity mandates for contractor systems handling sensitive government data.