NIST SP 800-171 Compliance and Cyber Incident Reporting

The contract requires comprehensive cybersecurity support to ensure adherence to DFARS 252.204-7012, focusing on the protection of covered defense information and the timely reporting of cyber incidents that impact such data. The effort is centered on achieving and maintaining compliance with NIST SP 800-171 standards, which outline the security requirements for safeguarding controlled unclassified information in nonfederal systems. This includes implementing technical, administrative, and physical controls to secure information systems, conducting regular assessments, and establishing incident response protocols to detect, report, and mitigate cyber threats affecting covered defense information. The work is to be performed at the specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The contract is issued as a subcontract under the Department of Defense, specifically through the ASC Commodities Division, and falls under NAICS code 541512 for computer systems design services. Interested parties must submit responses by August 4, 2026, following the solicitation posted on July 27, 2026. Compliance with all cybersecurity requirements is mandatory, and failure to meet reporting or safeguarding obligations could result in contractual penalties or loss of eligibility for future defense work.