Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for systems that handle Controlled Unclassified Information, ensuring alignment with federal cybersecurity standards. This includes the development and regular updating of a System Security Plan and a Plan of Action and Milestones to document control implementation status, remediation efforts, and risk mitigation activities. The contractor must establish robust procedures for timely cyber incident reporting as mandated by federal guidelines, ensuring all incidents are identified, contained, reported, and resolved in accordance with applicable requirements. The work is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance centered in New Cumberland, Pennsylvania, zip code 17070-5002. The North American Industry Classification System code is 541512, indicating this effort falls under computer systems design services. The solicitation was posted on July 14, 2026, with responses due by July 22, 2026, and all activities must comply with the strict timelines and compliance expectations set forth by the DoD to safeguard CUI across government-contracted systems.