Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of National Institute of Standards and Technology Special Publication 800-171 controls to protect controlled unclassified information throughout the duration of contract performance. All activities must adhere to the stringent cybersecurity requirements outlined in NIST SP 800-171 to ensure the confidentiality, integrity, and availability of CUI handled during operations. The subcontract is tied to a Department of Defense agency, specifically the ASC SUPPLIER OPER AE AND AF DIV, with performance centered at a location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The North American Industry Classification System code 541512 identifies the work as related to computer systems design services. The solicitation was posted on July 19, 2026, with a response deadline of July 27, 2026, indicating a tight window for submission and evaluation. This is a subcontract under a larger DoD procurement, and compliance with NIST SP 800-171 is mandatory for eligibility. Contractors must be prepared to demonstrate not only the technical deployment of required safeguards but also documented assessments validating full alignment with all 110 controls. Failure to meet these standards could result in non-compliance penalties or termination of the subcontract. The focus is entirely on securing CUI in environments where it is created, processed, stored, or transmitted during contract execution.