NIST SP 800-171 Assessment & Compliance Support

The contract requires comprehensive cybersecurity compliance support to meet Department of Defense requirements under DFARS 252.204-7012, specifically targeting the execution of a NIST SP 800-171 assessment to evaluate the handling, storage, and transmission of controlled unclassified information. The selected contractor must develop a fully detailed System Security Plan that outlines the implementation of 110 security controls defined in NIST SP 800-171, ensuring alignment with federal standards for protecting sensitive defense information. In addition, the contractor is tasked with producing a comprehensive Plan of Action and Milestones that identifies gaps, remediation strategies, timelines, and responsible parties to achieve full compliance. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is performance-based, with work required to be conducted at the designated place of performance in New Cumberland, Pennsylvania, under the oversight of the ASC Commodities Division within the Department of Defense. The opportunity was posted on July 20, 2026, and responses are due by July 28, 2026, with no set-aside provisions specified. All deliverables must be finalized to demonstrate adherence to DoD cybersecurity mandates and support ongoing contract fulfillment for systems handling controlled unclassified information.