Cybersecurity Compliance (NIST SP 800-171 Assessment)

The contract requires the successful bidder to conduct a NIST SP 800-171 assessment to ensure full compliance with cybersecurity requirements for safeguarding covered defense information within contractor systems, as mandated by DFARS clause 252.240-7997. This involves evaluating current security controls, identifying gaps, and implementing corrective actions to meet the specified standards for protecting sensitive defense data stored or processed on nonfederal systems. The assessment must be thorough, document adherence to all 110 security requirements outlined in NIST SP 800-171, and provide evidence of compliance for audit purposes. The solicitation is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at New Cumberland, PA, 17070-5002. It falls under NAICS code 541512 for computer systems design services and has a response deadline of July 29, 2026. While no set-aside designation is specified, the nature of the work necessitates expertise in federal cybersecurity frameworks and experience in conducting formal assessments within defense supply chain environments. Bidders must be prepared to demonstrate proven capability in NIST 800-171 implementation and compliance verification to meet contractual obligations.