Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and documentation of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard Controlled Unclassified Information across all affected systems. This includes developing a comprehensive System Security Plan and ensuring full readiness for formal assessments, with all controls rigorously mapped, deployed, and maintained to meet federal compliance standards. The effort is focused on securing technical and operational environments to prevent unauthorized access, disclosure, or compromise of sensitive data handled under the agreement. Performed under a subcontract tied to the Department of Defense’s ASC Commodities Division, the work is to be executed at the place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation falls under NAICS code 541612 for computer systems design services and has a response deadline of May 18, 2026. The contract is not subject to any specific set-aside classification and must be fulfilled by a party capable of delivering full NIST SP 800-171 compliance, including documentation, internal audits, and evidentiary support for assessment validation.