Cybersecurity Compliance Implementation & NIST SP 800-171 Assessment

This contract requires the implementation, assessment, and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST Special Publication 800-171 requirements. The work involves establishing and validating security measures across systems handling CUI, ensuring full compliance through systematic evaluation and continuous monitoring. A critical component of the deliverables includes submitting accurate and timely scores to the Supplier Performance Risk System and maintaining an up-to-date Plan of Action and Milestones to address any identified compliance gaps or weaknesses. The contract is structured as a subcontract under the Department of Defense’s Electrical Devices Division, with performance centered in New Cumberland, Pennsylvania, at the ZIP code 17070-5002. The solicitation was posted on May 8, 2026, and responses are due by May 13, 2026, with a NAICS code of 541611 indicating management, scientific, and technical consulting services. All activities must be executed in accordance with federal cybersecurity standards, emphasizing documentation, accountability, and proactive risk mitigation throughout the implementation lifecycle.