Cybersecurity Compliance (NIST SP 800-171)

The contract mandates the implementation and ongoing maintenance of security controls outlined in NIST SP 800-171 to safeguard Covered Defense Information within contractor systems. This involves establishing, documenting, and enforcing technical, administrative, and physical controls to ensure compliance with federal cybersecurity standards for protecting sensitive defense data residing on or transiting through nonfederal systems. Contractors are required to conduct thorough self-assessments of their security posture against the 110 controls specified in the standard, and must be prepared to provide documentation and support during government audits or evaluations to verify adherence. The work is to be performed at the New Cumberland facility with a zip code of 17070-5002, under the oversight of the Department of Defense’s DDSP New Cumberland Facility. The solicitation is classified as a subcontract and falls under NAICS code 541512 for computer systems design services. Responses must be submitted by July 31, 2026, following a posting date of July 20, 2026. Full compliance with NIST SP 800-171 is critical, as failure to meet requirements may result in exclusion from contract performance or termination of awards, and all supporting evidence for assessments must be accurately maintained and readily accessible for government review.