Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls aligned with NIST Special Publication 800-171 to protect Controlled Unclassified Information (CUI) on systems under the purview of the Fluid Handling Division within the Department of Defense. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and involves ensuring full compliance with all 110 controls outlined in the NIST standard, including administrative, technical, and physical safeguards. Documentation must be thorough and evidentiary, demonstrating that each control is not only implemented but also consistently maintained and monitored. This subcontract is classified under NAICS code 541512, indicating it falls within the scope of computer systems design services, and is intended to support defense-related infrastructure handling sensitive but unclassified data. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, indicating a narrow window for proposal submission. The contract type is explicitly a subcontract, meaning the successful bidder will operate under a prime contractor and must align their deliverables with the overarching contractual obligations of the prime. There is no set-aside designation specified, so all eligible entities may respond. The work must result in a complete, audit-ready cybersecurity compliance posture, with all policies, procedures, system configurations, and assessment records meticulously documented to meet federal requirements for CUI protection. Failure to fully comply with NIST SP 800-171 could result in non-conformance and potential termination of the subcontract.