Cybersecurity Compliance (NIST SP 800-171 Assessment & Implementation)

The contract requires full implementation and documentation of NIST SP 800-171 controls to protect controlled unclassified information within systems handling sensitive defense-related data. This includes conducting a comprehensive assessment of current cybersecurity posture, identifying gaps against the NIST framework, and executing necessary technical and administrative safeguards to achieve full compliance. All activities must be thoroughly documented to support formal compliance reporting and audit readiness, ensuring the defense contractor meets federal requirements for safeguarding CUI. This is a small business set-aside subcontract under NAICS code 541512, exclusively available to total small businesses, and is issued by the Electrical Devices Division of the Department of Defense. Performance is to take place at a designated location in New Cumberland, Pennsylvania, with a response deadline of August 10, 2026. The effort is mission-critical to ensuring secure information handling across defense systems and demands proven experience in NIST 800-171 implementation, system assessment, and compliance documentation within a federal contracting environment.