NIST SP 800-171 Compliance & CUI Safeguarding

The contract requires the implementation and maintenance of robust cybersecurity controls to safeguard covered defense information in accordance with NIST SP 800-171 and the Federal Acquisition Regulation clause FAR 52.204-7012. This includes the development and documentation of a System Security Plan that outlines how security requirements are met across all systems handling controlled unclassified information. The contractor must ensure continuous compliance with all specified access controls, audit and accountability measures, configuration management, identification and authentication protocols, and incident response procedures. Any security incidents involving covered defense information must be reported promptly as mandated by the regulation. This subcontract is part of a Department of Defense initiative managed by the ASC Commodities Division, with performance required at the specified location in New Cumberland, Pennsylvania, ZIP 17070-5002. The work falls under NAICS code 541512, indicating it is related to computer systems design services. Submissions are due by July 29, 2026, and the solicitation was posted on July 21, 2026. Compliance with all technical and procedural requirements under NIST SP 800-171 is mandatory, and failure to meet these obligations may result in contract non-compliance or termination. Security measures must align with federal standards to ensure the integrity, confidentiality, and availability of sensitive defense information throughout the contract period.