Cybersecurity Compliance for Covered Systems (NIST SP 800-171)

This contract requires strict adherence to NIST SP 800-171 standards for securing covered defense information across all information systems utilized during performance. The subcontractor must implement and maintain robust cybersecurity controls to protect sensitive data, including conducting thorough system assessments and producing comprehensive documentation to demonstrate compliance. All systems must be evaluated against the specified framework to ensure alignment with federal cybersecurity requirements for contractors handling controlled unclassified information. The contract is issued under NAICS code 541512 by the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance expected to occur in New Cumberland, Pennsylvania, 17070-5002. It is structured as a subcontract with a response deadline of August 11, 2026, and was posted on August 3, 2026. No set-aside designation is specified, and all awarded parties are expected to meet the full scope of NIST SP 800-171 requirements without exception, with accountability for continuous compliance throughout the contract lifecycle.