Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of safeguarding measures to protect covered defense information in accordance with DFARS 252.204-7012 and NIST SP 800-171 standards. The winning party must conduct a comprehensive self-assessment to ensure full compliance with the security controls outlined in NIST SP 800-171, documenting all efforts, findings, and corrective actions taken to secure controlled unclassified information. This effort is critical to meet federal cybersecurity requirements and must be completed prior to contract performance. The work is classified as a subcontract under NAICS code 541512 and will be performed at the specified location in New Cumberland, Pennsylvania with ZIP code 17070-5002. The solicitation was posted on July 27, 2026, and responses are due by August 7, 2026. The contracting activity is managed by the Active Devices Division within the Department of Defense, with all deliverables focused on achieving and demonstrating cybersecurity compliance through detailed documentation and validated implementation of required security controls.