Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) in compliance with DFARS clauses 252.204-7012 and 252.240-7997. This effort is focused on ensuring that all cybersecurity requirements are fully met to protect sensitive defense-related data processed, stored, or transmitted by the contractor. The task involves not only deploying the necessary technical, administrative, and physical safeguards outlined in NIST SP 800-171 but also conducting a thorough assessment to validate compliance, documenting findings, and maintaining ongoing adherence to the standard throughout the contract period. The opportunity is structured as a small business subcontract set-aside under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541512 indicating it falls under Computer Systems Design Services. It is administered by the Department of Defense under the agency name Construction & Equipment MRO SVC I, with performance required at a specified location in New Cumberland, Pennsylvania, zip code 17070-5002. All responses must be submitted by the deadline of August 17, 2026, following the posting date of August 5, 2026. The contract aims to strengthen cybersecurity posture for defense logistics and maintenance operations by ensuring that only qualified small businesses with proven capability in cybersecurity compliance are selected to fulfill the requirement.