Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 security controls to ensure the protection of Controlled Unclassified Information (CUI) in compliance with DFARS 252.240-7997. This subcontract is focused on establishing a robust cybersecurity framework that aligns with federal standards to safeguard sensitive but unclassified data handled by the contractor. The work must be performed at the specified place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is classified under NAICS code 541512, which pertains to computer systems design and related services. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026, indicating a relatively short timeline for submission and readiness. The contracting activity falls under the ASC Commodities Division of the Department of Defense, underscoring the critical nature of the cybersecurity obligations tied to defense-related operations. Compliance with all NIST 800-171 requirements is mandatory, including documentation, access controls, configuration management, and continuous monitoring, with assessments likely to be part of the deliverables.