Cybersecurity Compliance for Controlled Data (NIST SP 800-171)

This contract requires the implementation and assessment of NIST SP 800-171 cybersecurity requirements to safeguard controlled unclassified information (CUI) within contractor systems. The work involves aligning technical, operational, and managerial controls to meet federal standards for protecting sensitive data handled by defense subcontractors, with a focus on ensuring compliance across all relevant systems and processes. The assessment will evaluate the effectiveness of these controls and verify adherence to the full scope of NIST guidelines, with findings used to validate security posture and readiness for continued contract performance. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the contract falls under NAICS code 541512 for computer systems design services. It is structured as a subcontract under the Department of Defense, managed by LAND SUPPLIER OPNS ENGINES, and was posted on August 3, 2026, with a response deadline of August 14, 2026. All proposals must demonstrate proven experience in executing NIST SP 800-171 compliance programs, including documentation of policies, implementation timelines, and validation methods. Failure to meet these requirements may result in non-compliance penalties or termination of subcontracting eligibility.