Cybersecurity Control Implementation Support

The contract requires implementation of technical and administrative security controls aligned with NIST SP 800-171 to safeguard controlled unclassified information within the Department of Defense supply chain. Key focus areas include access controls to ensure only authorized personnel can interact with sensitive systems, comprehensive audit logging to track and monitor user activities, media protection measures to secure physical and digital storage devices, and the development of a robust incident response plan to detect, contain, and recover from cybersecurity events. All work must be performed at the specified place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the task falls under NAICS code 541512 for computer systems design services. The solicitation is structured as a subcontract and is open for responses through August 5, 2026, with submissions due by 5 PM Eastern Time. The contracting office is part of the ASC Supplier Oper OEM Division, indicating this effort supports a broader DoD initiative to enforce cybersecurity compliance across vendor networks.