Cybersecurity Compliance Implementation & NIST SP 800-171 Assessment

The contract requires the implementation of NIST SP 800-171 security controls across systems that handle Controlled Unclassified Information, ensuring alignment with federal cybersecurity standards for protecting sensitive but unclassified data. This includes developing comprehensive documentation such as System Security Plans and Plans of Action & Milestones to demonstrate compliance, track remediation efforts, and maintain ongoing adherence to regulatory requirements. The work must be executed in a manner that fully addresses all 110 controls specified in NIST SP 800-171, with emphasis on confidentiality, integrity, and availability of CUI. The contract is a subcontract under the Department of Defense, specifically tied to the DDSP NEW CUMBERLAND FACILITY, with performance occurring at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. It falls under NAICS code 541512 for computer systems design services and was posted on July 16, 2026, with a response deadline of July 27, 2026. The solicitation number is SPE7MC26T137Z and the opportunity is available through the DIBBS portal, though no specific set-aside or point of contact information is provided. Success requires a detailed understanding of NIST frameworks, documented evidence of control implementation, and coordination with federal compliance expectations.