Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls for systems that handle Controlled Unclassified Information, ensuring full compliance with NIST SP 800-171 and DFARS 252.240-7997. The work is focused on safeguarding sensitive government data by applying standardized security requirements designed to protect CUI across federal contractor environments. The performance location is in New Cumberland, Pennsylvania, with the work falling under NAICS code 541512, which corresponds to computer systems design and related services. This is a subcontract opportunity issued by the Department of Defense under the LSO Combat Vehicles and Armament organization. All proposed responses must be submitted by the deadline of July 27, 2026, with the solicitation originally posted on July 16, 2026. Failure to meet the specified NIST and DFARS requirements will result in non-compliance and potential disqualification. The contract mandates rigorous evaluation of existing security measures and the deployment of necessary controls to achieve and maintain compliance, including documentation, audit readiness, and continuous monitoring. While no set aside classification is specified, the work is strictly scoped to cybersecurity implementation and assessment activities within a defense-related context.