Cybersecurity Compliance (NIST SP 800-171)

The contract mandates strict adherence to NIST Special Publication 800-171 for cybersecurity controls to protect covered defense information within all systems handling contract data. Compliance with DFARS 252.204-7012 is required to ensure proper safeguarding, dissemination restrictions, and incident reporting procedures are implemented and maintained. All subcontractors must demonstrate full alignment with these standards to meet federal defense information security obligations, including conducting assessments, documenting control implementation, and ensuring continuous monitoring of information systems. This is a subcontract under the Department of Defense’s Active Devices Division, with a place of performance in New Cumberland, Pennsylvania, ZIP 17070-5002. It is classified under NAICS code 541512 for computer systems design services and carries a response deadline of August 3, 2026, with the solicitation posted on July 23, 2026. The contract does not specify a set-aside type or point of contact, and full compliance with cybersecurity requirements is non-negotiable for award consideration. All systems must be configured and operated to meet the stringent security controls outlined in NIST 800-171 without exception.