Cybersecurity Compliance (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 to safeguard Covered Defense Information against unauthorized access, disclosure, or compromise. The successful contractor must establish a compliant environment that aligns with all 110 controls outlined in the standard, covering areas such as access control, audit, configuration management, and incident response. Compliance must be verified through a System for Award Management SPRS assessment to demonstrate readiness and adherence, with continuous monitoring to ensure sustained compliance throughout the contract lifecycle. Any cyber incidents affecting CDI must be reported promptly in accordance with federal guidelines, ensuring transparency and timely mitigation. The contract is structured as a subcontract under the Department of Defense, specifically tied to the DDSP NEW CUMBERLAND FACILITY, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The NAICS code 541512 indicates the work falls under custom computer programming services, implying technical oversight and tailored cybersecurity solutions. The solicitation has a response deadline of July 20, 2026, and is open for proposals following a public posting on July 9, 2026. There is no set-aside classification disclosed, and no point of contact information is provided, suggesting proposers should reference the official DIBBS portal for further submission details and requirements.