Cybersecurity for Contractor Information Systems

The contract requires the implementation and ongoing maintenance of cybersecurity controls as defined by NIST Special Publication 800-171 to safeguard covered defense information on contractor information systems. This effort is focused on ensuring compliance with federal standards designed to protect sensitive information handled by defense contractors, with all controls to be fully operational and continuously monitored throughout the performance period. The work is classified as a subcontract under the NAICS code 541512, indicating it involves computer systems design and related services tailored to meet specific defense information security requirements. Performance is to be conducted at the New Cumberland facility with a ZIP code of 17070-5002, and the responsible agency is the Department of Defense through its DDSP New Cumberland Facility. The contract opportunity was posted on August 2, 2026, and responses are due by August 13, 2026. While no specific set-aside classification or point of contact is provided, the solicitation emphasizes strict adherence to NIST SP 800-171 requirements, and failure to meet these controls will result in non-compliance. The contractor must demonstrate the ability to sustain these protections over time, including regular assessments, documentation, and remediation of identified vulnerabilities to maintain the integrity and confidentiality of covered defense information.