Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and assessment of cybersecurity controls outlined in NIST Special Publication 800-171 to safeguard covered defense information and ensure compliance with Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The work is focused on securing sensitive data handled by subcontractors supporting the Department of Defense, specifically under the ASC Commodities Division, with performance based in New Cumberland, Pennsylvania, zip code 17070-5002. The subcontractor must demonstrate full adherence to the 110 NIST 800-171 controls covering access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security awareness, system and communications protection, and system and information integrity. Submission is due by July 24, 2026, and the solicitation was posted on July 16, 2026, under NAICS code 541512 for Computer Systems Design Services. The contract is classified as a subcontract with no set-aside designation, indicating it is open to all qualified entities regardless of size or status. The primary objective is to validate the contractor’s ability to establish, maintain, and continuously monitor a secure information system environment that meets federal standards for protecting controlled unclassified information. Compliance will be assessed through documentation, technical evaluations, and possibly on-site reviews to confirm the effectiveness and sustainability of implemented controls.