Cybersecurity Compliance (NIST SP 800-171)

The contract involves implementing cybersecurity measures in accordance with NIST SP 800-171 standards for handling Controlled Unclassified Information (CUI). The scope focuses on ensuring compliance through key activities such as conducting self-assessments, developing a System Security Plan (SSP), and maintaining a Plan of Action and Milestones (POA&M). This effort is critical to safeguarding sensitive information within the supply chain. Issued by the Department of Defense’s ASC Commodities Division, this subcontract requires adherence to these cybersecurity protocols and is classified under NAICS code 541512, which pertains to computer systems design services. The work is to be performed in New Cumberland, with key deadlines including a solicitation posting date of May 13, 2026, and a response deadline of May 21, 2026. The opportunity is accessible through the Defense Industrial Base Platform, and while no set-aside status or specific organization type requirements are indicated, compliance with federal cybersecurity standards is mandatory.