Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls across all systems that handle Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified information. This work is critical to supporting DoD assessment requirements, which may include self-assessments, third-party evaluations, or audit readiness activities to verify adherence to the specified security controls. The contractor must establish, monitor, and continuously improve security measures to meet the technical and procedural expectations outlined in NIST SP 800-171, with a focus on safeguarding CDI throughout its lifecycle. This is a subcontract under a Total Small Business Set-Aside, designated for small businesses per SBA regulations, with the NAICS code 541512 indicating it falls under Computer Systems Design Services. The performance location is New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the contracting activity originates from the DDSP New Cumberland Facility under the Department of Defense. The solicitation was posted on July 22, 2026, with responses due by August 3, 2026, and the opportunity is managed through the DIBBS platform. The contractor must be prepared to operate under the full scope of NIST requirements without reliance on federal oversight for implementation, ensuring timely and accurate delivery of compliance outcomes.