Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls outlined in NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) in compliance with DFARS requirements. This effort is critical for ensuring that all systems, processes, and personnel handling CUI meet federal standards for data protection, with a focus on technical, administrative, and physical safeguards. The work must be thoroughly documented to demonstrate full adherence to the 110 controls specified in the NIST publication, including policies, procedures, system configurations, and training records, all of which will be subject to verification and potential audit. This subcontract is issued under the Department of Defense’s ASC Commodities Division, with performance expected to occur at New Cumberland, PA, ZIP 17070-5002. The North American Industry Classification System code 541512 indicates the work falls under computer systems design services, highlighting the technical nature of the required compliance activities. The solicitation was posted on July 14, 2026, with responses due by July 22, 2026, and the opportunity is accessible via the DIBBS platform. Successful bidders must possess the expertise to deploy and validate NIST 800-171 controls within a defense contractor environment, ensuring ongoing compliance and readiness for future assessments.