Cybersecurity Compliance (NIST SP 800-171)

The contract seeks implementation and assessment of NIST SP 800-171 security controls for systems handling Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards for nonfederal entities. The work involves evaluating existing security postures, deploying required controls, and validating adherence across all systems that process, store, or transmit CUI, with a focus on protecting sensitive but unclassified data in alignment with Department of Defense requirements. The place of performance is located in New Cumberland, Pennsylvania, and the effort is structured as a subcontract under the NAICS code 541611, indicating services related to computer systems design and integrated systems services. Proposals must be submitted by August 10, 2026, with the solicitation posted on July 29, 2026, indicating a window of approximately two weeks for response. The contracting activity is tied to the DDSP New Cumberland Facility under the Department of Defense, emphasizing the sensitive nature of the work and the necessity for rigorous compliance. While no set-aside preferences are specified, the subcontract nature suggests the prime contractor may be managing broader defense-related cybersecurity obligations. The effort requires demonstrated expertise in NIST controls, experience with CUI environments, and the ability to deliver documented assessments and remediation plans to meet federal compliance benchmarks.