Cybersecurity Compliance (NIST SP 800-171) Implementation

The contract requires implementation and assessment of compliance with NIST SP 800-171 to ensure the protection of covered defense information and proper reporting of cyber incidents. The work involves establishing and maintaining security controls aligned with the NIST framework, conducting internal evaluations to verify adherence, and ensuring processes are in place to detect, respond to, and report cybersecurity incidents in accordance with federal requirements. This is a subcontract under the Department of Defense, specifically managed by the Active Devices Division, with performance centered in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, under NAICS code 541512 for computer systems design services. Compliance is mandatory and must be demonstrable through documented practices, assessments, and ongoing monitoring to meet DoD standards for securing sensitive information.