Cybersecurity Compliance (NIST SP 800-171)

The contract requires the assessment and implementation of NIST SP 800-171 controls to protect covered defense information within the contractor’s systems, ensuring compliance with DFARS 252.204-7012 and 252.240-7997. This effort is focused on establishing a robust cybersecurity posture that meets Department of Defense standards for safeguarding sensitive unclassified information handled by subcontractors. The work must be performed at the designated place of performance in New Cumberland, PA, with a zip code of 17070-5002, and is classified as a subcontract under the NAICS code 541512 for computer systems design services. Proposals must be submitted by the deadline of August 4, 2026, and the solicitation was posted on July 27, 2026. The contracting agency is the ASC Commodities Division under the Department of Defense, and the procurement is managed through the DIBBS platform. While no specific set-aside designation is listed, the subcontractor is expected to demonstrate full adherence to NIST controls for CUI, including documentation, system configuration, personnel training, and continuous monitoring to maintain compliance throughout the contract term. Failure to meet these requirements may result in non-compliance penalties and termination of contractual obligations.