Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and documentation of NIST SP 800-171 controls to safeguard covered defense information, ensuring alignment with federal cybersecurity standards for contractors handling sensitive government data. This includes conducting a thorough system assessment to identify existing gaps, developing comprehensive security policies and procedures that meet NIST requirements, and establishing robust cyber incident reporting mechanisms as mandated by DFARS 252.204-7012. The work must be performed at the designated location in New Cumberland, PA, with all deliverables focused on achieving and maintaining compliance through accurate documentation and operational adherence. The subcontract is issued under NAICS code 541512 for computer systems design services and is solicited by the Department of Defense under the Medical Supply Chain MD Surg FSF. The opportunity was posted on July 21, 2026, with a response deadline of July 27, 2026, indicating a tight turnaround for qualified vendors to submit proposals. Although no specific set-aside categories are designated, the requirement is explicitly for a subcontractor to support the prime contractor’s compliance obligations. All activities must align with the Defense Federal Acquisition Regulation Supplement to ensure continuous protection of controlled unclassified information and timely reporting of any cybersecurity incidents.