Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires implementation and assessment of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information within supplier systems, ensuring compliance with federal standards for protecting sensitive but unclassified data. The work involves evaluating existing security practices, identifying gaps against the NIST framework, and executing necessary controls to achieve full compliance, with a focus on securing CUI across IT and operational environments. All activities must align with the Department of Defense’s expectations and be performed at the designated location in New Cumberland, Pennsylvania, under the oversight of the Electrical Devices Division. This is a subcontract opportunity posted on July 9, 2026, with a response deadline of July 20, 2026, and falls under NAICS code 541512 for Computer Systems Design Services. The effort demands technical expertise in cybersecurity frameworks, documentation of control implementation, and validation of compliance readiness. Contractors must be prepared to demonstrate their ability to meet NIST requirements through detailed assessments, remediation plans, and ongoing monitoring capabilities. The work is critical to maintaining the integrity and confidentiality of information handled by defense suppliers and requires strict adherence to federal cybersecurity mandates without reliance on external file references or proprietary systems.