Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls for systems handling Controlled Unclassified Information, ensuring full compliance with federal cybersecurity standards. This includes the preparation of a System Security Plan and a Plan of Action and Milestones, which must detail the current security posture, identified gaps, corrective actions, and timelines for remediation. The work is scoped as a subcontract under the Department of Defense, specifically through its Active Devices Division, and is tied to a place of performance in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The contract is classified under NAICS code 541512, indicating it relates to custom computer programming services, suggesting the work involves tailored cybersecurity solutions rather than off-the-shelf products. The solicitation was posted on July 9, 2026, with responses due by July 20, 2026, indicating a tight turnaround for proposals that must demonstrate technical capability, experience with NIST controls, and a clear methodology for achieving compliance.