Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to protect Controlled Unclassified Information within contractor systems, with a primary focus on developing a System Security Plan and a Plan of Action and Milestones. This effort is essential to ensure compliance with federal cybersecurity standards for handling sensitive but unclassified data. The work must be performed at the New Cumberland facility with a ZIP code of 17070-5002, and the contract is structured as a subcontract under a Total Small Business Set-Aside designation, meaning only small businesses are eligible to respond. The NAICS code 541512 indicates this is for custom computer programming services, aligning the scope with technical and IT security implementation tasks. The solicitation was posted on July 19, 2026, with a firm response deadline of July 30, 2026, and is managed by the Department of Defense through the DDSP New Cumberland Facility. The set-aside status requires the prime contractor to be a small business as defined by the Small Business Administration, and the performance location is specifically tied to the New Cumberland area. While no point of contact is listed, the official solicitation can be accessed via the DIBBS portal using the provided link. All deliverables must meet NIST SP 800-171 requirements, including thorough documentation of control implementation status, remediation timelines, and ongoing compliance readiness.