Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. All systems and processes must be configured to meet the specific requirements outlined in the NIST framework, with continuous monitoring and documentation to demonstrate adherence. Any cyber incident affecting the confidentiality, integrity, or availability of covered defense information must be reported to the appropriate authority within 72 hours of discovery, as mandated by DFARS 252.204-7012, with no delays or exceptions permitted. This is a subcontract under the Department of Defense, categorized under NAICS code 541512 for computer systems design services, with the place of performance located in New Cumberland, Pennsylvania, at ZIP code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, indicating a narrow window for submission. While no set-aside type is specified, the contract is part of a broader defense cyber compliance initiative and requires demonstrated capability to enforce and sustain robust security controls without reliance on third-party assurances. Bidders must be prepared to provide evidence of existing NIST 800-171 implementation and incident response protocols to be considered eligible.