Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls for contractor information systems that process, store, or transmit Controlled Unclassified Information, in full compliance with the National Institute of Standards and Technology Special Publication 800-171 as mandated by the Defense Federal Acquisition Regulation Supplement. The work pertains to systems supporting the Department of Defense and must be executed in accordance with strict federal cybersecurity standards to ensure the protection of sensitive but unclassified data. All required safeguards, policies, and procedural controls must be thoroughly documented and validated to demonstrate adherence to NIST SP 800-171 requirements. This is a subcontract solicitation under NAICS code 541512, with a performance location in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 9, 2026, and responses are due by July 20, 2026. The contracting activity is managed by the DDSP New Cumberland Facility under the Department of Defense, and the work must be completed within the timeframe specified to meet compliance obligations. Failure to meet these requirements may result in non-compliance penalties, loss of contract eligibility, or termination. All parties involved must ensure technical and administrative readiness to implement and sustain the necessary cybersecurity measures as defined by federal regulatory guidelines.