IT Security Compliance for Contractor Systems

The contract requires the implementation and assessment of NIST SP 800-171 security controls to protect covered defense information on contractor systems, directly aligning with the requirements of DFARS 252.204-7012 and clause 252.240-7997. This effort is focused on ensuring that all information systems handling sensitive defense data meet the established cybersecurity standards for confidentiality, integrity, and availability, with compliance verified through formal assessment procedures. The scope encompasses configuring, testing, and documenting controls across contractor infrastructure to meet federal cybersecurity mandates, with ongoing monitoring and reporting expected to maintain adherence throughout the contract period. This is a subcontract under the Department of Defense’s Land Supply Chain, with the place of performance located in New Cumberland, Pennsylvania, 17070-5002. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services, suggesting the need for specialized IT security expertise. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and all parties must be prepared to demonstrate full compliance with NIST controls and DFARS requirements at the time of submission and throughout performance. Failure to meet these standards may result in non-compliance penalties or termination of the subcontract.