Cybersecurity Compliance (NIST SP 800-171 Implementation)

The contract requires the implementation and documentation of NIST Special Publication 800-171 controls to safeguard controlled unclassified information in alignment with Defense Federal Acquisition Regulation Supplement requirements. The work centers on ensuring complete compliance across all 110 security controls outlined in NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, and incident response, with thorough documentation to demonstrate adherence and readiness for assessment. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, indicating the physical or operational site where the security measures must be deployed and maintained. This is a subcontract opportunity under the NAICS code 541512 for computer systems design services, issued by the Active Devices Division within the Department of Defense. The solicitation was posted on August 5, 2026, with a firm response deadline of August 17, 2026, leaving a limited window for qualified vendors to submit proposals. While no set-aside type is specified, the nature of the work demands expertise in federal cybersecurity frameworks and experience with DoD compliance environments, particularly in handling CUI within non-federal systems. Successful contractors must be prepared to provide detailed implementation plans, control mappings, and ongoing documentation to support continuous compliance and potential audit readiness.