Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of cybersecurity safeguards to protect controlled unclassified information (CUI) in compliance with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement (DFARS) standards. This subcontract is focused on ensuring that all systems and processes handling CUI meet rigorous federal security requirements, including access controls, audit capabilities, configuration management, incident response, and data encryption. The performance of these obligations must be executed at the specified location in New Cumberland, Pennsylvania, with zip code 17070-5002, and all activities must align with the technical and procedural frameworks outlined in NIST SP 800-171. The solicitation is issued under NAICS code 541512 for computer systems design services and is managed by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. The response deadline is July 22, 2026, and the contract was posted on July 14, 2026. Although no set-aside type is specified, the contracting entity expects full compliance with federal cybersecurity mandates and demands verifiable documentation to demonstrate adherence throughout the implementation lifecycle. Failure to meet these requirements could result in non-compliance penalties, contract termination, or loss of eligibility for future DoD work.