Cybersecurity Compliance for Covered Contractor Systems (NIST SP 800-171)

The contract requires the implementation and documentation of basic cybersecurity safeguarding controls for contractor information systems that process, store, or transmit federal contract information, in full alignment with NIST Special Publication 800-171 and the Federal Acquisition Regulation clause 52.204-93. This effort is focused on ensuring that all applicable security requirements are systematically applied to protect sensitive government data from unauthorized access, disclosure, or compromise, with thorough documentation to demonstrate compliance. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is classified as a subcontract under the NAICS code 541512 for Computer Systems Design Services. The solicitation is issued by the Department of Defense through the DDSP New Cumberland Facility and has a response deadline of July 20, 2026, with a posting date of July 9, 2026. Contractors must be prepared to meet the stringent security standards outlined in NIST SP 800-171, including but not limited to access control, audit and accountability, configuration management, identification and authentication, and incident response. Compliance is mandatory, and failure to implement and document the required controls may result in contract non-performance or termination. This effort does not involve any set-aside requirements, and all eligible subcontractors must be prepared to fulfill the cybersecurity obligations within the specified timeframe and location.