Cybersecurity Compliance for Contractor Systems (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity safeguards for systems handling controlled unclassified information in strict alignment with NIST SP 800-171 requirements. The work involves deploying technical and administrative controls to protect sensitive data, conducting thorough assessments to validate compliance, and ensuring all contractor systems meet federal standards for safeguarding CUI. This effort is critical to maintaining the integrity, confidentiality, and availability of information processed, stored, or transmitted on systems supporting defense operations. The contract is structured as a subcontract under the Department of Defense’s Active Devices Division with a performance location in New Cumberland, Pennsylvania, 17070-5002. It falls under NAICS code 541512 for computer systems design services and is open for response until August 10, 2026. The solicitation is posted on DIBBS with no set-aside designation, meaning all eligible entities may compete. Compliance with NIST SP 800-171 is mandatory and will be subject to formal evaluation as part of the deliverables, making rigorous documentation, continuous monitoring, and remediation of security gaps essential components of the project.