Cybersecurity Compliance and Reporting

The contract requires the implementation of NIST Special Publication 800-171 security controls across all IT systems that handle covered defense information related to contract performance. This includes establishing and maintaining robust cybersecurity measures designed to protect sensitive data from unauthorized access, disclosure, or compromise. The contractor must ensure full alignment with the control requirements outlined in NIST SP 800-171 and demonstrate ongoing compliance through documented policies, procedures, and system configurations. In addition to implementing the required controls, the contractor must maintain a functional cyber incident reporting capability to promptly detect, respond to, and report any security incidents involving covered defense information. Reporting must be conducted in accordance with federal guidelines and timelines, ensuring timely communication to appropriate authorities when a breach or suspected compromise occurs. The work is to be performed at the specified location in New Cumberland, PA, under a subcontract award, with a response deadline of August 20, 2026, and classified under the NAICS code 541512 for computer systems design services.