Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and maintenance of cybersecurity controls to safeguard covered defense information in alignment with DFARS 252.204-7012 and NIST SP 800-171 standards. All activities must ensure that sensitive data handled under this agreement is protected through a comprehensive set of security requirements designed to mitigate risks associated with unauthorized access, disclosure, or compromise. The contractor is expected to establish, document, and enforce policies and procedures that meet the full scope of NIST 800-171 controls, including access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. This subcontract is issued under the NAICS code 541512 for computer systems design services and is tied to performance at New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026. The contracting entity is part of the Department of Defense under the organization Land Supplier Ops Engines. Compliance with these cybersecurity mandates is mandatory, and failure to meet the specified controls could result in non-performance or termination. The contractor must be prepared to demonstrate adherence through documentation, assessments, and potential audits at any time during the contract term.