Cybersecurity Compliance Support (NIST SP 800-171)

This contract provides cybersecurity compliance support to ensure adherence to NIST SP 800-171 requirements for the protection of Controlled Unclassified Information as mandated by DFARS 252.204-7012. The scope includes conducting a thorough system assessment to identify gaps in security controls, developing and maintaining necessary documentation to demonstrate compliance, and establishing processes for timely cyber incident reporting in accordance with federal regulations. All activities must align with the NIST framework to safeguard CUI handled by the contractor and ensure full alignment with Department of Defense cybersecurity standards. The work is to be performed at the designated location in New Cumberland, PA, with a response deadline of May 13, 2026, and was posted on May 8, 2026. This is a subcontract under NAICS code 541512, categorized under the Department of Defense’s ASC Commodities Division. The effort is critical to maintaining the integrity of information systems handling sensitive unclassified data, requiring rigorous methodology, accurate recordkeeping, and proactive communication in the event of security breaches. Participants must be prepared to meet strict compliance timelines and deliverables as dictated by federal contract obligations.