Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to protect Controlled Unclassified Information within contractor systems, with a specific focus on achieving and sustaining Department of Defense assessment readiness. Compliance with all 110 controls outlined in NIST SP 800-171 is mandatory, covering areas such as access control,audit and accountability, configuration management, identification and authentication, and incident response, ensuring that systems handling CUI meet federal cybersecurity standards. The contractor must demonstrate continuous adherence to these requirements and be prepared for official DoD assessments at any time. This is a subcontract under the Department of Defense, with performance location specified as New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The NAICS code 541512 indicates the work falls under Computer Systems Design and Related Services, reflecting the technical nature of the cybersecurity implementation and support responsibilities. While no set-aside designation is provided, the requirement is strictly tied to DoD compliance obligations and demands proven expertise in NIST frameworks and CUI protection protocols.