Cybersecurity Compliance and Reporting Services

The contract seeks services to implement and document cybersecurity controls aligned with NIST SP 800-171 for systems that handle covered defense information, ensuring full compliance with federal requirements for protecting sensitive data. The work includes configuring, testing, and validating technical and procedural safeguards across all applicable systems, as well as establishing and maintaining incident reporting mechanisms that meet federal standards for timely detection, response, and notification of cybersecurity events. All activities must be thoroughly documented to support audits and attestations, with emphasis on accuracy, traceability, and ongoing operational readiness. This subcontract is issued by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, with performance required at a designated location in New Cumberland, Pennsylvania, 17070-5002. The solicitation falls under NAICS code 541612 for computer systems design services and is open for responses until July 28, 2026. The contractor must possess the technical expertise and experience to support DoD cybersecurity obligations, including familiarity with the NIST framework and the ability to integrate controls into existing infrastructure while maintaining system functionality and data integrity. Compliance is non-negotiable, and failure to meet requirements may result in contract termination or penalties.