Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and assessment of NIST Special Publication 800-171 security controls to protect covered defense information and ensure timely reporting of cyber incidents. The scope focuses on achieving compliance with the specified framework to safeguard sensitive data handled by the contractor, with an emphasis on technical and procedural measures aligned with federal cybersecurity standards. Execution must occur at the place of performance in New Cumberland, Pennsylvania, and the work is structured as a subcontract under the Department of Defense, specifically under the Land Supplier Operations Vehicle Support organization. The solicitation is open for responses until August 10, 2026, with a posting date of July 30, 2026, and falls under NAICS code 541512 for computer systems design services. There is no set-aside designation, and the contracting activity is managed through the DLA Dibbs platform. Failure to meet the required controls or report incidents promptly may result in noncompliance penalties, contract termination, or loss of eligibility for future Defense Department work. The contractor must demonstrate robust cybersecurity posture and maintain documentation to support audit readiness throughout performance.