Cybersecurity Compliance for Covered Systems

The contract requires the implementation of NIST SP 800-171 safeguarding measures on contractor systems that handle controlled unclassified information, in full alignment with DFARS requirements. This subcontract is scoped to ensure robust cybersecurity controls are in place to protect CUI throughout its lifecycle, including access control, audit and accountability, configuration management, identification and authentication, and incident response, among other specified controls. All systems must be assessed and validated to meet the standards outlined in NIST SP 800-171, with full documentation and ongoing compliance maintained as part of the contractual obligation. The work will be performed at the New Cumberland location with a ZIP code of 17070-5002, under the oversight of the Department of Defense through the DDSP New Cumberland Facility. The solicitation, identified by the RFQ number SPE7L726T4481, was posted on July 28, 2026, and responses are due by August 10, 2026. The NAICS code 541512 indicates the nature of the work relates to computer systems design services, underscoring the technical and specialized nature of the cybersecurity implementation required. Failure to comply with NIST SP 800-171 requirements could result in contract termination or penalties, making adherence to all safeguarding protocols a critical and non-negotiable component of performance.