Cybersecurity Compliance Support (NIST SP 800-171)

This contract requires the implementation and assessment of NIST Special Publication 800-171 security controls to safeguard covered defense information within contractor systems, ensuring compliance with federal cybersecurity standards for defense contractors. The work involves evaluating current system configurations, identifying gaps in security controls, and executing necessary measures to meet the NIST 800-171 requirements, with an emphasis on protecting sensitive information handled on or behalf of the Department of Defense. The solicitation is classified as a subcontract under NAICS code 541512, indicating it pertains to custom computer programming services related to cybersecurity implementation. The place of performance is specified as New Cumberland, Pennsylvania, with a response deadline of July 20, 2026. Although the overarching agency is the Department of Defense, the specific office responsible is the Electrical Devices Division, and the contract is posted through the DIBBS platform for potential subcontractors to respond before the deadline. Compliance with these controls is mandatory for any contractor handling covered defense information, and failure to meet requirements could result in loss of eligibility for future DoD work.