Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and thorough documentation of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information within the Department of Defense’s supply chain environment. The work involves developing a System Security Plan and a Plan of Action and Milestones to demonstrate compliance with all required security controls, ensuring that systems handling sensitive data meet federal standards for protection and risk mitigation. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, indicating the physical or operational site where the cybersecurity framework must be established and maintained. This subcontract, classified under NAICS code 541512 for Computer Systems Design Services, is posted with a response deadline of July 23, 2026, and was made available on July 20, 2026. It falls under the auspices of the Land Supply Chain organization within the Department of Defense, emphasizing the critical nature of securing data within defense logistics and procurement infrastructure. The contractor must ensure all documentation is comprehensive, accurate, and auditable to support compliance verification, with no set-asides specified, meaning any eligible subcontractor may respond. The work is technical and compliance-driven, requiring expertise in NIST standards, risk management, and federal cybersecurity protocols.