Cybersecurity Compliance (NIST SP 800-171 Assessment)

The contract requires assessment and implementation of cybersecurity controls to ensure compliance with NIST SP 800-171 standards for safeguarding controlled unclassified information within the Department of Defense environment. This includes the comprehensive development of a System Security Plan and a Plan of Action and Milestones, both critical documents mandated by DFARS clauses to demonstrate adherence to federal cybersecurity requirements. The work is scoped to identify gaps in current security posture, apply necessary controls, and maintain ongoing compliance through documented remediation efforts. The solicitation is issued as a subcontract under the NAICS code 541512 for computer systems design services, with a performance location in Annville, Pennsylvania, 17003-5002. It is managed by the ASC Commodities Division and has a response deadline of August 11, 2026, following a posting date of August 3, 2026. While no set-aside designation is specified, the effort is focused on providing specialized cybersecurity expertise to meet defense contracting obligations related to CUI protection, with all deliverables aligned to federal standards and contractual compliance obligations.