Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information (CUI) in accordance with DFARS 252.204-7012 requirements. This includes developing a comprehensive System Security Plan (SSP) that outlines how security controls are applied across systems handling CUI, as well as a Plan of Actions and Milestones (POA&M) to track remediation efforts for any identified gaps or weaknesses in the current security posture. The work is focused on achieving full compliance with federal cybersecurity standards for contractors handling sensitive government information, with an emphasis on actionable documentation and measurable remediation timelines. The solicitation is classified as a subcontract under NAICS code 541512, which pertains to custom computer programming services, and is managed by the ACTIVE DEVICES DIVISION under the Department of Defense. Performance is to be conducted at a specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. Responses must be submitted by August 3, 2026, with the solicitation posted on July 23, 2026. Interested parties are directed to the official DIBBS portal for additional details and to submit their proposals.