Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for any system that processes, stores, or transmits Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards for non-federal entities. This subcontract, issued under a Total Small Business Set-Aside, is managed by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY and specifically targets small businesses as defined by the SBA, with performance expected to occur at the facility in NEW CUMBERLAND, PA, 17070-5002. The work falls under NAICS code 541512, indicating it involves computer systems design and related services, and demands a thorough understanding of how to institutionalize and sustain the 110 security controls outlined in NIST SP 800-171 across all relevant systems, including documentation, personnel training, continuous monitoring, and annual assessment readiness. Proposals must be submitted by the deadline of July 6, 2026, and the opportunity is listed on the DIBBS platform, emphasizing the need for timely responses from qualified small business contractors with proven experience in federal cybersecurity compliance. The contractor will be responsible not only for establishing the required controls but also for maintaining them throughout the contract term, demonstrating audit readiness at all times and interfacing with DoD cybersecurity authorities as necessary. No specific point of contact is provided, so proposers must rely on the public DIBBS link for all application-related communications, and all compliance efforts must align with the full scope of NIST SP 800-171 without deviation, ensuring the protection of CUI at all stages of handling.