Information Systems Safeguarding (NIST SP 800-171 Compliance)

This contract requires the implementation and assessment of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard controlled unclassified information (CUI) on information systems operated by the subcontractor. The work is part of a broader effort by the Department of Defense through the Land Supply Chain organization to ensure that all systems handling CUI meet federally mandated security standards, with performance focused at the specified location in New Cumberland, Pennsylvania, ZIP 17070-5002. The subcontract is classified under NAICS code 541512, indicating it pertains to computer systems design services, and demands full compliance with NIST 800-171 requirements including access control, audit and accountability, configuration management, and incident response. Responses must be submitted by August 3, 2026, with the solicitation posted on July 23, 2026, allowing vendors a narrow window to prepare and submit proposals. The contract type is explicitly a subcontract, meaning the awardee will be working under a prime contractor or another entity directly accountable to the Department of Defense. There is no set-aside designation specified, so participation is open to all eligible businesses regardless of size or ownership classification. The contractor will be expected to document, implement, validate, and maintain all required security controls, and likely undergo periodic assessments to demonstrate ongoing compliance, ensuring the integrity and confidentiality of CUI throughout the system lifecycle.