Cybersecurity Control Implementation & Remediation Support

The contract requires implementation of technical and administrative cybersecurity controls to achieve full compliance with NIST SP 800-171 standards, ensuring all 110 required controls are fully satisfied. This includes identifying existing gaps, developing and executing remediation plans, and validating that all controls are properly applied and sustained. The effort must extend to all subcontractors who handle Controlled Unclassified Information, ensuring consistent flow-down of requirements and compliance across the supply chain. The work is focused on securing systems and processes that process, store, or transmit CUI, with an emphasis on documentation, audit readiness, and continuous monitoring to maintain compliance. The contract is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance based in New Cumberland, Pennsylvania, 17070-5002. The NAICS code 541512 indicates the work falls under Computer Systems Design and Related Services. Responses are due by May 18, 2026, with the solicitation posted on May 10, 2026. All activities must align with federal cybersecurity mandates and demonstrate measurable progress toward achieving and sustaining 110/110 NIST compliance without exceptions.